CVE-2022-20814

A vulnerability in the certificate validation of Cisco Expressway-C and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data. The vulnerability is due to a lack of validation of the SSL server certificate that an affected device...

The vulnerability of the Expressway-E server allows attackers to impersonate other users within the compromised system, using devices that are part of the Cisco Expressway Series and Cisco Telepresence VCS family.

The vulnerability of the Expressway-E server in Cisco Expressway Series and Cisco Telepresence VCS conference communication devices is related to improper authentication. Exploiting this vulnerability allows a malicious actor to impersonate another user within the compromised system...

CVE-2024-20497

Cisco Expressway Edge (Expressway-E) is affected by an improper authorization vulnerability. An authenticated MRA user can masquerade as another user and potentially intercept calls or spoof caller IDs due to inadequate authorization checks for Mobile and Remote Access users. Exploitation require...

CVE-2024-20497: Improper Authorization

A vulnerability in Cisco Expressway Edge Expressway-E could allow an authenticated, remote attacker to masquerade as another user on an affected system. This vulnerability is due to inadequate authorization checks for Mobile and Remote Access MRA users. An attacker could exploit this vulnerabilit...