297 matches found
The vulnerability of the microprogramming software of the Cisco TelePresence Conductor conference call control device allows a intruder to gain access to the device.
The vulnerability of the control interface for microprogramming-based conference communication devices like Cisco TelePresence Conductor is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain access to the device using a...
Design/Logic Flaw
Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release allow remote attackers to inject arbitrary cookies via a crafted HTTP request, aka Bug ID CSCuh25408...
CVE-2015-0747
Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release allow remote attackers to inject arbitrary cookies via a crafted HTTP request, aka Bug ID CSCuh25408...
CVE-2015-0747
CVE-2015-0747 affects Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release. A remote attacker can inject arbitrary cookies by sending a crafted HTTP request due to improper input validation of an HTTP header, potentially taking control of an HTTP session. Cisco’s advisory confirms ...
CVE-2015-0747: Improper Input Validation
Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release allow remote attackers to inject arbitrary cookies via a crafted HTTP request, aka Bug ID CSCuh25408...
PT-2015-4860
Name of the Vulnerable Software and Affected Versions Cisco Conductor for Videoscape version 3.0 Cisco Headend System Release affected versions not specified Description The issue allows remote attackers to inject arbitrary cookies via a crafted HTTP request. Recommendations For Cisco Conductor f...
Cisco Conductor for Videoscape and Cisco Headend System Release HTTP Injection Vulnerability
A vulnerability in the Cisco Conductor for Videoscape and Cisco Headend System Releases could allow an unauthenticated, remote attacker to inject arbitrary HTTP cookies via an HTTP request. The vulnerability is due to improper input validation of an HTTP request header. An attacker could exploit...
Cisco TelePresence Conductor Login Security Bypass Vulnerability
According to its self-reported version number, the Cisco TelePresence Conductor on the remote host contains an vulnerability due to inadequate validation of parameters passed during the login process. A remote attacker, using a crafted request and knowledge of a valid user name, can bypass...
Cisco TelePresence Conductor SDP Media Description Vulnerability
According to its self-reported version number, the Cisco TelePresence Conductor on the remote host contains an vulnerability related to the Session Description Protocol SDP packet handler function. A remote, unauthenticated attacker, using a crafted SDP packet to trigger a reload, can exploit thi...
Authentication flaw
The management interface in Cisco TelePresence Video Communication Server VCS and Cisco Expressway before X7.2.4, X8 before X8.1.2, and X8.2 before X8.2.2 and Cisco TelePresence Conductor before X2.3.1 and XC2.4 before XC2.4.1 allows remote attackers to bypass authentication via crafted login...
CVE-2015-0653
CVE-2015-0653 affects Cisco TelePresence VCS/Expressway, Cisco TelePresence Conductor, and XC2.4-era components, where the management interfaces allow remote authentication bypass via crafted login parameters. The root cause is inadequate validation of login parameters, enabling an attacker with ...
CVE-2015-0652
CVE-2015-0652 affects Cisco TelePresence VCS, Cisco Expressway (before X8.2) and Cisco TelePresence Conductor (before XC2.4). The SDP packet handler vulnerability allows a remote, unauthenticated attacker to cause a denial of service (mishandled exception and device reload) via a crafted SDP medi...
Cisco TelePresence VCS and Conductor SDP Message Denial of Service Vulnerability
Cisco TelePresence is a telepresence conferencing solution developed by Cisco.Cisco Expressway is a video conferencing application. A security vulnerability in Cisco TelePresence VCS and Conductor SDP message handling allows attackers to exploit the vulnerability to submit special IPv4 or IPv6v6...
PT-2015-4781
Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS versions prior to X8.2 Cisco Expressway versions prior to X8.2 Cisco TelePresence Conductor versions prior to XC2.4 Description The issue is related to the Session Description Protocol SDP...
CVE-2015-0653: Improper Authentication
The management interface in Cisco TelePresence Video Communication Server VCS and Cisco Expressway before X7.2.4, X8 before X8.1.2, and X8.2 before X8.2.2 and Cisco TelePresence Conductor before X2.3.1 and XC2.4 before XC2.4.1 allows remote attackers to bypass authentication via crafted login...
CVE-2015-0652: Improper Input Validation
The Session Description Protocol SDP implementation in Cisco TelePresence Video Communication Server VCS and Cisco Expressway before X8.2 and Cisco TelePresence Conductor before XC2.4 allows remote attackers to cause a denial of service mishandled exception and device reload via a crafted media...
PT-2015-1313
Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS versions prior to X7.2.4 Cisco TelePresence Video Communication Server VCS versions X8 prior to X8.1.2 Cisco TelePresence Video Communication Server VCS versions X8.2 prior to X8.2.2 Cisco...
Multiple Vulnerabilities in Cisco TelePresence Video Communication Server, Cisco Expressway, and Cisco TelePresence Conductor
Cisco TelePresence Video Communication Server VCS, Cisco Expressway and Cisco TelePresence Conductor contain the following vulnerabilities: SDP Media Description Denial of Service Vulnerability Authentication Bypass Vulnerability Successful exploitation of the SDP Media Description Denial of...
Cisco TelePresence Conductor GNU glibc gethostbyname Function Buffer Overflow Vulnerability (GHOST)
According to its self-reported version number, the Cisco TelePresence Conductor remote device is affected by a heap-based buffer overflow vulnerability in the GNU C Library glibc due to improperly validating user-supplied input to the nsshostnamedigitsdots, gethostbyname, and gethostbyname2...