CVE-2019-1721: Improper Input Validation

A vulnerability in the phone book feature of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker to cause the CPU to increase to 100% utilization, causing a denial of service DoS condition on an affected system. The...

CVE-2019-1722: Cross-Site Request Forgery (CSRF)

A vulnerability in the FindMe feature of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected system. The vulnerability is due ...

PT-2019-1982

Name of the Vulnerable Software and Affected Versions Cisco Expressway Series versions prior to X12.5.1 Cisco TelePresence Video Communication Server versions prior to X12.5.1 Description A vulnerability exists due to improper handling of XML input, allowing an authenticated, remote attacker to...

PT-2019-1992

Name of the Vulnerable Software and Affected Versions Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS versions prior to X12.5.1 Description A vulnerability in the FindMe feature could allow an unauthenticated, remote attacker to conduct a cross-site request forgery...

PT-2019-1988

Name of the Vulnerable Software and Affected Versions Cisco Expressway Series versions prior to X12.5.1 Cisco TelePresence Video Communication Server versions prior to X12.5.1 Description The issue is caused by insufficient input validation in the XML API, allowing a remote attacker to cause a...

PT-2019-3759

Name of the Vulnerable Software and Affected Versions ARM Relay software affected versions not specified Description The issue is related to errors in data type processing in the interaction protocol between the ARM Relay software and the Communication Server software of the EKRASMS-SP complex...

CVE-2016-5800

A malicious attacker can trigger a remote buffer overflow in the Communication Server in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0...

Buffer overflow

A malicious attacker can trigger a remote buffer overflow in the Communication Server in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0...

CVE-2016-5800

CVE-2016-5800 describes a remote buffer overflow in the Communication Server of Fatek Automation PM Designer v3 (2.1.2.2) and FV Designer (1.2.8.0). The issue enables remote exploitation that could crash the system or allow arbitrary code execution. Affected components: Communication Server withi...

PT-2019-7835

Name of the Vulnerable Software and Affected Versions Fatek Automation PM Designer V3 version 2.1.2.2 Fatek Automation FV Designer version 1.2.8.0 Description A malicious attacker can trigger a remote buffer overflow in the Communication Server. Recommendations For Fatek Automation PM Designer V3...

CVE-2016-5800: Stack-based Buffer Overflow

A malicious attacker can trigger a remote buffer overflow in the Communication Server in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0...

Cisco TelePresence Conductor Web Interface Data Compromise

The vulnerability of the software web interface of Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server lies in insufficiently checking incoming requests. Exploiting this vulnerability allows a malicious actor to compromise the integrity of...

Cisco TelePresence Video Communication Server (VCS) Cross-Site Request Forgery Vulnerability

Cisco TelePresence Video Communication Server is a video server developed by Cisco. Cisco TelePresence Video Communication Server suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to submit a special request and execute arbitrary code...

CVE-2018-18505

An earlier fix for an Inter-process Communication IPC vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the...

PT-2018-13031

Name of the Vulnerable Software and Affected Versions Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS affected versions not specified Description A vulnerability in the administrative web interface could allow an authenticated, remote attacker to execute code with...

CVE-2018-15430: Improper Input Validation

A vulnerability in the administrative web interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker to execute code with user-level privileges on the underlying operating system. The vulnerability is due to insufficien...

Cisco Expressway Series and Cisco TelePresence Video Communication Server Remote Code Execution Vulnerability

A vulnerability in the administrative web interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker to execute code with user-level privileges on the underlying operating system. The vulnerability is due to insufficien...

CVE-2018-0409

A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service CUCM IM&P and the Cisco TelePresence Video Communication Server VCS and Expressway could allow an unauthenticated, remote attacker to cause a temporary service outage for all IM&P users,...

PT-2018-1536

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager IM and Presence Service versions affected versions not specified Cisco TelePresence Video Communication Server versions affected versions not specified Description The issue is caused by insufficient input...

CVE-2018-0409: Improper Input Validation

A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service CUCM IM&P and the Cisco TelePresence Video Communication Server VCS and Expressway could allow an unauthenticated, remote attacker to cause a temporary service outage for all IM&P users,...