Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities

🗓️ 05 Oct 2022 16:00:00Reported by CiscoType

Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilitie

Reporter	Title	Published	Views	Family All 42
ATTACKERKB	CVE-2022-20812	6 Jul 202216:00	–	attackerkb
BDU FSTEC	The vulnerability of the API interface of the database of Cisco Expressway Series and Cisco Telepresence VCS devices allows attackers to perform attacks by bypassing the absolute path on the vulnerable device and rewriting files in the basic operating system with root privileges.	8 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of Cisco Expressway micro-programming software and Cisco TelePresence Video Communication Server micro-programming device management software allows a attacker to perform a CSRF attack.	18 Oct 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Cisco Expressway microprogramming software and Cisco TelePresence Video Communication Server microprogramming software for control devices is related to errors in the authentication process. This vulnerability allows attackers to execute a type of “man-in-the-middle” attack.	18 Oct 202200:00	–	bdu_fstec
Circl	CVE-2022-20812	7 Jul 202200:14	–	circl
Circl	CVE-2022-20814	7 Oct 202210:05	–	circl
Circl	CVE-2022-20853	7 Oct 202210:05	–	circl
Tenable Nessus	Cisco Expressway Series and Cisco TelePresence Video Communication Server CSRF (cisco-sa-expressway-csrf-sqpsSfY6)	7 Oct 202200:00	–	nessus
Tenable Nessus	Cisco Expressway Series and Cisco TelePresence VCS Improper Certificate Validation Vulnerability (cisco-sa-expressway-csrf-sqpsSfY6)	7 Oct 202200:00	–	nessus
Tenable Nessus	Cisco TelePresence VCS Multiple Vulnerabilities (cisco-sa-expressway-overwrite-3buqW8LH)	8 Jul 202200:00	–	nessus