Authentication flaw

2015-03-1301:59:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.7%

JSON

The management interface in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X7.2.4, X8 before X8.1.2, and X8.2 before X8.2.2 and Cisco TelePresence Conductor before X2.3.1 and XC2.4 before XC2.4.1 allows remote attackers to bypass authentication via crafted login parameters, aka Bug IDs CSCur02680 and CSCur05556.

CPENameOperatorVersion
expressway_softwareeq>= x7.2 AND < x7.2.4
expressway_softwareeq>= x8.1 AND < x8.1.2
expressway_softwareeq>= x8.2 AND < x8.2.2
telepresence_conductoreq>= x2.3 AND < x2.3.1
telepresence_conductoreq>= xc2.4 AND < xc2.4.1
telepresence_video_communication_server_softwareeq>= x7.2 AND < x7.2.4
telepresence_video_communication_server_softwareeq>= x8.1 AND < x8.1.2
telepresence_video_communication_server_softwareeq>= x8.2 AND < x8.2.2

Name	Operator	Version
expressway_software	eq	>= x7.2 AND < x7.2.4
expressway_software	eq	>= x8.1 AND < x8.1.2
expressway_software	eq	>= x8.2 AND < x8.2.2
telepresence_conductor	eq	>= x2.3 AND < x2.3.1
telepresence_conductor	eq	>= xc2.4 AND < xc2.4.1
telepresence_video_communication_server_software	eq	>= x7.2 AND < x7.2.4
telepresence_video_communication_server_software	eq	>= x8.1 AND < x8.1.2
telepresence_video_communication_server_software	eq	>= x8.2 AND < x8.2.2