Cisco TelePresence Video Communication Server Expressway Denial of Service Vulnerability (CNVD-2018-11975)

Cisco TelePresence Video Communication Server VCS Expressway is a TelePresence video communication server from Cisco that integrates with Unified Communications and voice communication environments to provide the best possible experience for end users using a variety of communication tools. A...

CVE-2018-0358: DEPRECATED: Uncontrolled File Descriptor Consumption

A vulnerability in the file descriptor handling of Cisco TelePresence Video Communication Server VCS Expressway could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to exhaustion of file descriptors while processing a high volume of...

PT-2018-8785

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS Expressway affected versions not specified Description A denial of service condition could be caused by an unauthenticated, remote attacker due to exhaustion of file descriptors while processin...

Cisco Expressway Series and Cisco TelePresence Denial of Service Vulnerability

Cisco Expressway Series Software and Cisco TelePresence Video Communication Server VCS Software are both telepresence video communication servers from Cisco that integrate with unified communications and voice communications environments to It can be integrated with unified communications and voi...

CVE-2017-12287

CVE-2017-12287 affects Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) Software. The issue stems from incomplete input validation of URL requests in the REST API of the CDB management component, allowing an authenticated, remote attacker to send a crafted URL that ...

PT-2017-12461

Name of the Vulnerable Software and Affected Versions Cisco Expressway Series Software affected versions not specified Cisco TelePresence Video Communication Server VCS Software affected versions not specified Description The issue is related to incomplete input validation of URL requests by the...

CVE-2017-12287: Improper Input Validation

A vulnerability in the cluster database CDB management component of Cisco Expressway Series Software and Cisco TelePresence Video Communication Server VCS Software could allow an authenticated, remote attacker to cause the CDB process on an affected system to restart unexpectedly, resulting in a...

Cisco TelePresence Video Communication Server Denial of Service Vulnerability (CNVD-2017-221679)

Cisco TelePresence Video Communication Server VCS is a telepresence video communication server from Cisco USA.Session Initiation Protocol SIP is one of the session initiation protocols. A denial of service vulnerability exists in SIP in Cisco TelePresence VCS. A remote attacker could exploit this...

PT-2017-17323

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS affected versions not specified Description A vulnerability in the Session Initiation Protocol SIP could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on...

CVE-2017-6790: Undefined Security Weakness

A vulnerability in the Session Initiation Protocol SIP on the Cisco TelePresence Video Communication Server VCS could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the targeted appliance. The vulnerability is due to excessive SIP traffic sent to the devic...

CVE-2016-5798

An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0. By sending additional valid packets, an attacker could trigger a stack-based buffer overflow and cause a crash. Also, a malicious attacker can trigger a remote buffer overflow o...

CVE-2016-5798: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0. By sending additional valid packets, an attacker could trigger a stack-based buffer overflow and cause a crash. Also, a malicious attacker can trigger a remote buffer overflow o...

Description of the cumulative update for Office Communications Server 2007 R2, Microsoft Unified Communications Managed API 2.0 Windows Workflow Activities Redist: March, 2011

Describes the bugs that are resolved in the cumulative update for Office Communications Server 2007 R2, Microsoft Unified Communications Managed API 2.0 Windows Workflow Activities Redist that is dated March 2011.SummaryThis article describes the issue that is fixed in the Office Communications...

Design/Logic Flaw

A vulnerability in the HTTP traffic server component of Cisco Expressway could allow an unauthenticated, remote attacker to initiate TCP connections to arbitrary hosts. This does not allow for full traffic proxy through the Expressway. Affected Products: This vulnerability affects Cisco Expresswa...

PT-2016-7703

Name of the Vulnerable Software and Affected Versions Cisco Expressway Series Software versions prior to X8.9 Cisco TelePresence Video Communication Server VCS versions prior to X8.9 Description A vulnerability in the HTTP traffic server component could allow an unauthenticated, remote attacker t...

PT-2016-6686

Name of the Vulnerable Software and Affected Versions Fatek Automation PM Designer version 2.1.2.2 Fatek Automation FV Designer version 1.2.8.0 Description An issue allows an attacker to trigger a stack-based buffer overflow by sending additional valid packets, potentially causing a crash...

CVE-2016-9207: Improper Input Validation

A vulnerability in the HTTP traffic server component of Cisco Expressway could allow an unauthenticated, remote attacker to initiate TCP connections to arbitrary hosts. This does not allow for full traffic proxy through the Expressway. Affected Products: This vulnerability affects Cisco Expresswa...

Fatek Automation Communication Server Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Fatek Automation Communication Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of query requests. An overly long string sent while...

FreePBX 13.0.35 Remote Code Execution

Vulnerable software : Freepbx Tested version : 13.0.35 vendor : freepbx.org Author : Ahmed sultan 0x4148 Email : [email protected] Summary : FreePBX is a web-based open source GUI graphical user interface that controls and manages Asterisk PBX, an open source communication server, With over 1...

PT-2016-4816

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server Expressway version X8.5.2 Description The administrative web interface in Cisco TelePresence Video Communication Server Expressway allows remote authenticated users to execute arbitrary commands vi...