Lucene search
+L

526 matches found

ATTACKERKB
ATTACKERKB
added 2022/05/18 4:0 p.m.10 views

CVE-2022-20809

Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker to write files or disclose sensitive information on an affected device. For more information about...

6.5CVSS6.6AI score0.00906EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/05/18 4:0 p.m.7 views

CVE-2022-20806

Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker to write files or disclose sensitive information on an affected device. For more information about...

7.1CVSS7AI score0.00918EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/05/18 4:0 p.m.6 views

CVE-2022-20807

Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker to write files or disclose sensitive information on an affected device. For more information about...

6.5CVSS6.6AI score0.00933EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/05/18 12:0 a.m.8 views

多款Cisco产品日志信息泄露漏洞

Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS are both products of Cisco, Inc.Cisco Expressway Series is software for accessing devices outside the firewall. The software provides simple, highly secure access for users outside the firewall, helping telecommuters wo...

6.5CVSS6.6AI score0.00906EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/05/18 12:0 a.m.8 views

Cisco Expressway Series和Cisco TelePresence Video Communication Server 日志信息泄露漏洞

Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS are both products of Cisco, Inc.Cisco Expressway Series is software for accessing devices outside the firewall. The software provides simple, highly secure access for users outside the firewall, helping telecommuters wo...

7.1CVSS7AI score0.00918EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/05/18 12:0 a.m.6 views

Cisco Expressway Series 和 TelePresence Video Communication Server 日志信息泄露漏洞

Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS are both products of Cisco, Inc.Cisco Expressway Series is software for accessing devices outside the firewall. The software provides simple, highly secure access for users outside the firewall, helping telecommuters wo...

6.5CVSS6.5AI score0.00933EPSS
Exploits0References4
NVD
NVD
added 2022/04/06 7:15 p.m.20 views

CVE-2022-20755

Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker with read/write privileges to the application to write files or execute arbitrary code on the...

9CVSS0.03177EPSS
Exploits0References1
OSV
OSV
added 2022/04/06 7:15 p.m.4 views

CVE-2022-20755

Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker with read/write privileges to the application to write files or execute arbitrary code on the...

7.2CVSS7.6AI score0.03177EPSS
Exploits0References1
NVD
NVD
added 2022/04/06 7:15 p.m.20 views

CVE-2022-20754

Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker with read/write privileges to the application to write files or execute arbitrary code on the...

9CVSS0.03177EPSS
Exploits0References1
OSV
OSV
added 2022/04/06 7:15 p.m.6 views

CVE-2022-20754

Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker with read/write privileges to the application to write files or execute arbitrary code on the...

7.2CVSS6.2AI score0.03177EPSS
Exploits0References1
Prion
Prion
added 2022/04/06 7:15 p.m.22 views

Design/Logic Flaw

Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker with read/write privileges to the application to write files or execute arbitrary code on the...

9CVSS7.3AI score0.03177EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2022/04/06 7:15 p.m.17 views

Design/Logic Flaw

Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker with read/write privileges to the application to write files or execute arbitrary code on the...

9CVSS7.3AI score0.03177EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/04/06 6:13 p.m.10 views

CVE-2022-20755 Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities

Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker with read/write privileges to the application to write files or execute arbitrary code on the...

9CVSS7.7AI score0.03177EPSS
Exploits0References1
CVE
CVE
added 2022/04/06 6:13 p.m.108 views

CVE-2022-20755

CVE-2022-20755 affects Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS). An authenticated, remote attacker with read/write privileges can exploit weaknesses in the API and web-based management interfaces to write arbitrary files or execute code on the underlying OS ...

9CVSS8AI score0.03177EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/04/06 6:13 p.m.40 views

CVE-2022-20755 Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities

Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker with read/write privileges to the application to write files or execute arbitrary code on the...

9CVSS9.4AI score0.03177EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/04/06 6:13 p.m.9 views

CVE-2022-20754 Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities

Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker with read/write privileges to the application to write files or execute arbitrary code on the...

9CVSS7.7AI score0.03177EPSS
Exploits0References1
CVE
CVE
added 2022/04/06 6:13 p.m.196 views

CVE-2022-20754

CVE-2022-20754 affects Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS). The vulnerabilities reside in the API/cluster database and web-based management interfaces, caused by insufficient input validation of user-supplied command arguments. An authenticated, read/wr...

9CVSS8AI score0.03177EPSS
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/05 12:0 a.m.14 views

The vulnerability in the web interface for controlling Cisco Expressway Series and Cisco Telepresence VCS devices allows a hacker to execute arbitrary code as a root user.

The vulnerability of the Web interface for controlling Cisco Expressway Series and Cisco Telepresence VCS devices is related to insufficient checking of the command arguments entered by users. Exploiting this vulnerability allows a malicious actor to execute arbitrary code as a root user remotely...

9CVSS6AI score0.03177EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/03/05 12:0 a.m.14 views

The vulnerability of the API of the Cisco Expressway Series and Cisco Telepresence VCS conference communication devices allows a hacker to re-record arbitrary files on the host operating system as the root user.

The vulnerability of the API of the Cisco Expressway Series and Cisco Telepresence VCS conference communication devices relates to insufficient validation of command arguments entered by users. Exploiting this vulnerability allows a malicious actor to re-write any files on the underlying operatin...

9CVSS5.5AI score0.03177EPSS
Exploits0References3Affected Software2
Malwarebytes
Malwarebytes
added 2022/03/04 6:10 p.m.32 views

Update now! Cisco fixes several vulnerabilities

Cisco has released a security advisory about two vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS. The flaws could allow an authenticated, remote attacker with read/write privileges to the application t...

7.8AI score0.03177EPSS
Exploits0
Rows per page
Query Builder