CVE-2019-1679

🗓️ 07 Feb 2019 21:00:00Reported by ciscoType

A vulnerability in the web interface of Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server (VCS) Software allows authenticated remote attackers to trigger SSRF via crafted HTTP request

Reporter	Title	Published	Views	Family All 10
Cisco	Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server REST API Server-Side Request Forgery Vulnerability	6 Feb 201916:00	–	cisco
Tenable Nessus	Cisco TelePresence Conductor REST API Server-Side Request Forgery Vulnerability	27 Aug 201900:00	–	nessus
Tenable Nessus	Cisco TelePresence VCS / Expressway Series < 12.5 REST API Server-Side Request Forgery Vulnerability	27 Aug 201900:00	–	nessus
CNVD	Cisco TelePresence Video Communication Server (VCS) Cross-Site Request Forgery Vulnerability	12 Feb 201900:00	–	cnvd
Cvelist	CVE-2019-1679 Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server REST API Server-Side Request Forgery Vulnerability	7 Feb 201921:00	–	cvelist
EUVD	EUVD-2019-10236	7 Oct 202500:30	–	euvd
NVD	CVE-2019-1679	7 Feb 201921:29	–	nvd
Prion	Server side request forgery (ssrf)	7 Feb 201921:29	–	prion
Positive Technologies	PT-2019-1382 · Cisco · Cisco Telepresence Video Communication Server +2	6 Feb 201900:00	–	ptsecurity
Vulnrichment	CVE-2019-1679 Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server REST API Server-Side Request Forgery Vulnerability	7 Feb 201921:00	–	vulnrichment

NVD

Node

cisco telepresence_video_communication_serverRange<x12.5

Node

cisco telepresence_conductorRange<xc4.3.4

[
  {
    "product": "Cisco TelePresence Conductor",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "XC4.3.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Cisco Expressway Series",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "XC4.3.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Cisco TelePresence Video Communication Server",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "XC4.3.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/106940
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190206-rest-api-ssrf

21 Nov 2024 04:37Current

5.2Medium risk

Vulners AI Score5.2

CVSS 24

CVSS 3.15

CVSS 35

EPSS0.00077

SSVC

CWE-918