CVE-2015-6304

Cross-site request forgery CSRF vulnerability in Cisco TelePresence Server software 3.02.24 allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCut63718, CSCut63724, and CSCut63760...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco TelePresence Server software 3.02.24 allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCut63718, CSCut63724, and CSCut63760...

CVE-2015-6304

Cisco TelePresence Server software 3.0(2.24) is affected by CVE-2015-6304, a cross-site request forgery (CSRF) vulnerability that could allow an unauthenticated remote attacker to hijack a user’s session and perform actions with that user’s privileges. The vulnerability stems from insufficient CS...

CVE-2015-6304

Cross-site request forgery CSRF vulnerability in Cisco TelePresence Server software 3.02.24 allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCut63718, CSCut63724, and CSCut63760...

Cisco TelePresence Server Conference Control Protocol API URL Handling DoS (cisco-sa-20150916-tps)

According to the self-reported version, the Cisco TelePresence Server running on the remote host is affected by a buffer overflow condition in the Conference Control Protocol API due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this, via a crafted...

Cisco TelePresence Server Cross-Site Request Forgery Vulnerability

A vulnerability in the web interface of Cisco TelePresence Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against the user of the web interface. The vulnerability is due to insufficient CSRF protections. An attacker could exploit this...

Cisco TelePresence Server Denial of Service Vulnerability (cisco-sa-20150916-tps)

Cisco TelePresence Server contains a buffer overflow vulnerability in the Conference Control Protocol API that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a...

CVE-2015-6284

Buffer overflow in the Conference Control Protocol API implementation in Cisco TelePresence Server software before 4.12.33 on 7010, MSE 8710, Multiparty Media 310 and 320, and Virtual Machine devices allows remote attackers to cause a denial of service device crash via a crafted URL, aka Bug ID...

CVE-2015-6284

Cisco TelePresence Server is affected by a buffer overflow in the Conference Control Protocol API that can be triggered by a crafted URL to cause a denial of service (device crash). The vulnerability affects Cisco TelePresence Server software on 7010, MSE 8710, Multiparty Media 310/320, and Virtu...

CVE-2015-6284

Buffer overflow in the Conference Control Protocol API implementation in Cisco TelePresence Server software before 4.12.33 on 7010, MSE 8710, Multiparty Media 310 and 320, and Virtual Machine devices allows remote attackers to cause a denial of service device crash via a crafted URL, aka Bug ID...

Cisco TelePresence Server Software API Buffer Overflow Vulnerability

Cisco TelePresence Server Software is a videoconferencing solution known as a "telepresence" system. The program provides audio, video space and other components to provide remote participants with a "face-to-face" virtual meeting room effect. A buffer overflow vulnerability exists in the...

Cisco Releases Security Updates

Cisco has released updates to address vulnerabilities in Prime Collaboration Assurance, Prime Collaboration Provisioning, and TelePresence Server software. Exploitation of these vulnerabilities could allow a remote attacker to escalate privileges, obtain sensitive information, or cause a...

The vulnerability of the microprogramming software of the Cisco TelePresence Video Communication Server allows a perpetrator to gain access to protected data with hashed passwords.

The vulnerability of the System Snapshot extension in microprogramming software for Cisco TelePresence Video Communication Servers lies in the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to protected data using...

The vulnerability of the microprogramming software of the Cisco TelePresence Video Communication Server allows a intruder to gain access to protected information.

The vulnerability of the Configuration Log File component of the Cisco TelePresence Video Communication Server software lies in the lack of protection for sensitive data. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to protected information by analyzing log...

The vulnerability of the microprogramming software of the Cisco TelePresence VCS device allows a intruder to trigger a service failure.

The vulnerability of Cisco TelePresence VCS’s microprogramming software stems from resource management errors. Exploiting this vulnerability allows a malicious actor to trigger service failure by sending a specially crafted SDP request with session parameters during an SIP connection...

The vulnerability of the microprogramming software of the Cisco TelePresence Server allows a intruder to execute arbitrary code with privileges of the root user.

The vulnerability of the web-based framework of the microprogramming software for Cisco TelePresence Server lies in the lack of access control for files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with privileges of a root user...

Cisco TelePresence Server Detection

The remote host is running Cisco TelePresence Server, which is a management engine for other Cisco TelePresence equipment. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid83772; scriptversion"1.6"; scriptsetattributeattribute:"pluginmodificationdate",...

Cisco Virtual TelePresence Server Software Arbitrary Command Execution Vulnerability

Cisco Virtual TelePresence Server Software is a set of virtual telepresence server software from Cisco USA. The software provides audio, video space and other features. A security vulnerability exists in Cisco Virtual TelePresence Server Software that stems from the program's failure to properly...

CVE-2015-0660

Cisco Virtual TelePresence Server Software does not properly restrict use of the serial port, which allows local users to execute arbitrary OS commands as root by leveraging vSphere controller administrative privileges, aka Bug ID CSCus61123...

Design/Logic Flaw

Cisco Virtual TelePresence Server Software does not properly restrict use of the serial port, which allows local users to execute arbitrary OS commands as root by leveraging vSphere controller administrative privileges, aka Bug ID CSCus61123...