Code injection

2015-12-1303:59:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Cisco TelePresence Video Communication Server (VCS) X8.6 uses the same encryption key across different customers’ installations, which makes it easier for local users to defeat cryptographic protection mechanisms by leveraging knowledge of a key from another installation, aka Bug ID CSCuw64516.

CPENameOperatorVersion
telepresence_video_communication_server_softwareeq8.6.120

CPE	Name	Operator	Version
	telepresence_video_communication_server_software	eq	8.6.120

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151210-tvcs

www.securityfocus.com/bid/79065

www.securitytracker.com/id/1034429