Design/Logic Flaw

2015-12-1303:59:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

41.3%

JSON

Cisco TelePresence Video Communication Server (VCS) Expressway X8.6 allows remote authenticated users to bypass intended read-only restrictions and upload Tandberg Linux Package (TLP) files by visiting an administrative page, aka Bug ID CSCuw55651.

CPENameOperatorVersion
telepresence_video_communication_server_softwareeq8.6.120

CPE	Name	Operator	Version
	telepresence_video_communication_server_software	eq	8.6.120

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-tvc

www.securityfocus.com/bid/79088

www.securitytracker.com/id/1034378