CVE-2024-20252

Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an unauthenticated, remote attacker to conduct cross-site request forgery CSRF attacks that perform arbitrary actions on an affected device. Note: "Cisco Expressway Series" refers...

CVE-2024-20252

CVE-2024-20252 affects Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS). An unauthenticated, network-based attacker can exploit cross-site request forgery (CSRF) in the web-based management interface to perform arbitrary actions on an affected device. The issue requ...

Cisco Expressway Series Cross-Site Request Forgery Vulnerabilities

Multiple vulnerabilities in the Cisco Expressway Series could allow an unauthenticated, remote attacker to conduct cross-site request forgery CSRF attacks, which could allow the attacker to perform arbitrary actions on an affected device. Note: Cisco Expressway Series refers to Cisco Expressway...

Cisco Expressway Series 跨站请求伪造漏洞

Cisco Expressway Series is an American Cisco software for accessing devices outside the firewall. A cross-site request forgery vulnerability exists in Cisco Expressway Series, which can be exploited by an attacker to perform arbitrary operations...

Cisco Expressway Series 跨站请求伪造漏洞

Cisco Expressway Series is an American Cisco software for accessing devices outside the firewall. A cross-site request forgery vulnerability exists in Cisco Expressway Series, which can be exploited by an attacker to obtain sensitive information or perform unauthorized operations...

PT-2024-1655 · Cisco · Cisco Telepresence Video Communication Server +1

Name of the Vulnerable Software and Affected Versions: Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS affected versions not specified Description: The issue concerns multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Serve...

PT-2024-1549 · Cisco · Cisco Telepresence Video Communication Server +1

Name of the Vulnerable Software and Affected Versions: Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS affected versions not specified Description: The issue is related to cross-site request forgery CSRF attacks, which could allow an unauthenticated, remote attacker ...

PT-2024-1685 · Cisco · Cisco Expressway Series +1

Name of the Vulnerable Software and Affected Versions: Cisco Expressway Series and Cisco TelePresence Video Communication Server affected versions not specified Description: A vulnerability in the SOAP API could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSR...

Cisco Expressway Series 跨站请求伪造漏洞

Cisco Expressway Series is a software for accessing devices outside the firewall from Cisco USA. A cross-site request forgery vulnerability exists in Cisco Expressway Series, which can be exploited by an attacker to modify sensitive information or perform unauthorized operations...

Cisco Expressway Series / Cisco TelePresence VCS DoS (cisco-sa-http2-reset-d8Kf32vZ)

The Cisco Expressway Series or Cisco TelePresence Video Communication Server VCS running on the remote host is prior to 14.3.3. It is, therefore, affected by a denial of service DoS vulnerability, due to a HTTP/2 protocol-level weakness. The HTTP/2 protocol allows a denial of service server...

The vulnerability in the web interface for controlling Cisco Expressway Series and Cisco Telepresence VCS devices allows a perpetrator to execute arbitrary code.

The vulnerability of the web-based management interfaces for Cisco Expressway Series and Cisco Telepresence VCS devices exists due to the lack of measures taken to neutralize the special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to execu...

Cisco Expressway Series / Cisco TelePresence VCS < 14.3.1 Command Injection (cisco-sa-expressway-injection-X475EbTQ)

The Cisco Expressway Series or Cisco TelePresence Video Communication Server VCS running on the remote host is prior to 14.3.1. It is, therefore, affected by a command injection vulnerability as described in the cisco-sa-expressway-injection-X475EbTQ advisory. This vulnerability is due to...

CVE-2023-20209

A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker with read-write privileges on the application to perform a command injection attack that could result in remote code...

CVE-2023-20209

A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker with read-write privileges on the application to perform a command injection attack that could result in remote code...

Command injection

A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker with read-write privileges on the application to perform a command injection attack that could result in remote code...

CVE-2023-20209

A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker with read-write privileges on the application to perform a command injection attack that could result in remote code...

CVE-2023-20209

A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker with read-write privileges on the application to perform a command injection attack that could result in remote code...

CVE-2023-20209

The CVE-2023-20209 issue affects Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) where authenticated, read-write users can trigger a command injection via the web-based management interface. Concrete exploitation path: crafted inputs bypass validation in the PHP fr...

Cisco Expressway Series and Cisco TelePresence Video Communication Server Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker with read-write privileges on the application to perform a command injection attack that could result in remote code...

Cisco Expressway Series和Cisco TelePresence Video Communication Server 命令注入漏洞

Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS are both products of Cisco, Inc.Cisco Expressway Series is software for accessing devices outside the firewall. The software provides simple, highly secure access for users outside the firewall, helping telecommuters wo...