Command injection

2015-09-0216:59:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.2%

JSON

A local file script in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows local users to gain privileges for OS command execution via invalid parameters, aka Bug ID CSCuv10556.

CPENameOperatorVersion
telepresence_video_communication_server_softwareeq8.5.2120

CPE	Name	Operator	Version
	telepresence_video_communication_server_software	eq	8.5.2120

References

tools.cisco.com/security/center/viewAlert.x?alertId=40541

www.securitytracker.com/id/1033442