Lucene search
HistoryDec 13, 2015 - 3:59 a.m.
CVE-2015-6414
cisco
vcs
telepresence
encryption key
vulnerability
nvd
cve-2015-6414
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Cisco TelePresence Video Communication Server (VCS) X8.6 uses the same encryption key across different customers’ installations, which makes it easier for local users to defeat cryptographic protection mechanisms by leveraging knowledge of a key from another installation, aka Bug ID CSCuw64516.
Affected configurations
Node
ciscotelepresence_video_communication_server_softwareMatchx8.6
Related
cisco
cisco
prion
prion
Code injection
2015-12-13 03:59:00
cvelist
cvelist
CVE-2015-6414
2015-12-13 02:00:00
nvd
nvd
CVE-2015-6414
2015-12-13 03:59:08
openvas
openvas
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2015-6414