Cisco TelePresence Video Communication Server Information Disclosure Vulnerability

Cisco TelePresence is a Cisco TelePresence solution. Cisco TelePresence Video Communication Server VCS X8.6 uses the same key for different customer installations, which allows local users to bypass encryption protection mechanisms...

Cisco TelePresence Video Communication Server Cross-Site Request Forgery Vulnerability

Cisco TelePresence Video Communication Server is a telepresence video communication server from Cisco that integrates with Unified Communications and voice communication environments to provide the best possible experience for end users using a variety of communication tools. A cross-site request...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco TelePresence Video Communication Server VCS X8.5.1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuv72412...

PT-2015-7209

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS version X8.5.1 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users. Recommendations For Cisco TelePresence Video...

CVE-2015-6376: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Cisco TelePresence Video Communication Server VCS X8.5.1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuv72412...

Cisco TelePresence Video Communication Server Expressway File Modification Vulnerability (cisco-sa-20151007-vcs)

A vulnerability in the symbolic link operation of the Cisco TelePresence Video Communication Server VCS Expressway could allow an authenticated, local attacker to perform a symbolic link attack on the affected system. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be...

PT-2015-2348

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server versions X8.5.1 through X8.5.2 Description The issue exists due to insufficient input validation in the device's firmware, allowing a local attacker to read arbitrary files. Additionally, a symlink...

PT-2015-2330

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server versions X8.5.2 Description The issue is related to the process-management implementation in the Cisco TelePresence Video Communication Server, which has inadequate access controls for certain...

CVE-2015-4325: Undefined Security Weakness

The process-management implementation in Cisco TelePresence Video Communication Server VCS Expressway X8.5.2 allows local users to gain privileges by terminating a firestarter.py supervised process and then triggering the restart of a process by the root account, aka Bug ID CSCuv12272...

CVE-2015-6318: Improper Input Validation

Cisco TelePresence Video Communication Server VCS Expressway X8.5.1 and X8.5.2 allows local users to write to arbitrary files via an unspecified symlink attack, aka Bug ID CSCuv11969...

Cisco TelePresence Video Communication Server File Read DoS

The vulnerability of the Call Policy Configuration module in the Cisco TelePresence Video Communication Server software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to read arbitrary files or trigger a service failure using specially...

Cisco TelePresence Video Communication Server Arbitrary Command Execution

The vulnerability of the microprogramming software of the Cisco TelePresence Video Communication Server lies in the lack of access control for certain functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands during guest access using a special web page...

Cisco TelePresence Video Communication Server Arbitrary Code Injection

The vulnerability of the microprogramming software of the Cisco TelePresence Video Communication Server exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code using a specially crafted...

Cisco TelePresence Video Communication Server DoS

The vulnerability of the microprogramming software of the Cisco TelePresence Video Communication Server arises from resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failures by sending network packets with incorrect values...

Cisco TelePresence Video Communication Server Bypass

The vulnerability in the web-based administration interface of Cisco TelePresence Video Communication Server software is related to errors in managing registration data. Exploiting this vulnerability could allow a malicious actor to reset the passwords of arbitrary users remotely...

Cisco TelePresence Video Communication Server Arbitrary Command Execution

The vulnerability of the Microprogrammed Software of the Cisco TelePresence Video Communication Server exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands using a specially crafted HTTP reques...

Cisco TelePresence Video Communication Server Arbitrary Command Execution

The vulnerability of the Microprogrammed Software of the Cisco TelePresence Video Communication Server exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands using a specially crafted HTTP reques...

Cisco TelePresence Video Communication Server Privilege Escalation

The vulnerability of the CLI component of the Microprogramming Software for Cisco TelePresence Video Communication Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating locally, to gain root user privileges by modifying...

Cisco TelePresence Video Communication Server Access Bypass

The vulnerability of the Microprogramming Software of the Cisco TelePresence Video Communication Server lies in the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, who operates remotely and has completed the authentication process, to circumvent existi...

Cisco TelePresence Video Communication Server Expressway Operating System Command Injection Vulnerability

Cisco TelePresence Video Communication Server VCS Expressway is a TelePresence video communication server from Cisco that integrates with Unified Communications and voice communication environments to provide the best possible experience for end users using a variety of communication tools. A...