Cisco TelePresence Server API Privilege Vulnerability (cisco-sa-20170315-tps)

A vulnerability in Cisco TelePresence Server Software could allow an unauthenticated, remote attacker to emulate Cisco TelePresence Server endpoints. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respectiv...

Cisco TelePresence Server API Privilege Vulnerability

A vulnerability in Cisco TelePresence Server Software could allow an unauthenticated, remote attacker to emulate Cisco TelePresence Server endpoints. The vulnerability is due to how session identification information is maintained by a specific API of the affected software. An attacker could...

Telepresence Robots Patched Against Data Leaks

Double Robotics telepresence robots, marketed as a mobile conferencing tool giving remote workers a physical presence at an office, were recently patched against vulnerabilities that could be abused by an attacker. Researchers at Rapid7 today disclosed details on three vulnerabilities in the...

Cisco TelePresence VCS / Expressway < 8.8.2 Received Packet Parser DoS

According to its self-reported version, the Cisco TelePresence Video Communication Server VCS / Expressway running on the remote host is prior to 8.8.2. It is, therefore, affected by a denial of service vulnerability in the received packet parser due to insufficient size validation of user-suppli...

Multiple Cisco Products Cisco TelePresence Software Input Validation Vulnerability

Cisco TelePresence Software is the United States Cisco Cisco company's set of video conferencing solutions known as & ldquo; telepresence & rdquo; system. The program provides audio, video space and other components that can provide remote participants with a & ldquo; face-to-face & rdquo; virtua...

Cisco Expressway Series and Cisco TelePresence VCS Denial of Service Vulnerability

Cisco Expressway Series Software and Cisco TelePresence VCS Software are both telepresence video communications servers from Cisco. A security vulnerability exists in Cisco Expressway Series Software and Cisco TelePresence VCS Software versions prior to X8.8.2, which arises from the program's...

Cisco TelePresence MCU Fragmented Packets Reassembly RCE

According to the self-reported version, the remote Cisco TelePresence Multipoint Control Unit MCU device is affected by a buffer overflow condition that occurs when reassembling fragmented IPv4 and IPv6 packets due to improper size validation. An unauthenticated, remote attacker can exploit this...

CVE-2017-3790

A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS software could allow an unauthenticated, remote attacker to cause a reload of the affected system, resulting in a denial of service DoS condition. The vulnerability is du...

Design/Logic Flaw

A vulnerability in a proprietary device driver in the kernel of Cisco TelePresence Multipoint Control Unit MCU Software could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service DoS condition. The vulnerability is due to improper size validation when...

CVE-2017-3792

A vulnerability in a proprietary device driver in the kernel of Cisco TelePresence Multipoint Control Unit MCU Software could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service DoS condition. The vulnerability is due to improper size validation when...

CVE-2017-3790

A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS software could allow an unauthenticated, remote attacker to cause a reload of the affected system, resulting in a denial of service DoS condition. The vulnerability is du...

Buffer overflow

A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS software could allow an unauthenticated, remote attacker to cause a reload of the affected system, resulting in a denial of service DoS condition. The vulnerability is du...

CVE-2017-3792

A vulnerability in a proprietary device driver in the kernel of Cisco TelePresence Multipoint Control Unit MCU Software could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service DoS condition. The vulnerability is due to improper size validation when...

CVE-2017-3792

A vulnerability in a proprietary device driver in the kernel of Cisco TelePresence Multipoint Control Unit MCU Software could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service DoS condition. The vulnerability is due to improper size validation when...

CVE-2017-3790

A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS software could allow an unauthenticated, remote attacker to cause a reload of the affected system, resulting in a denial of service DoS condition. The vulnerability is du...

CVE-2017-3792

CVE-2017-3792 affects Cisco TelePresence MCU platforms (5300 Series, MSE 8510, 4500) running software version 4.3(1.68) or later in Passthrough content mode. The root cause is improper size validation when reassembling fragmented IPv4/IPv6 packets in a proprietary kernel device driver, enabling a...

CVE-2017-3790

CVE-2017-3790 affects Cisco Expressway Series and Cisco TelePresence VCS Software prior to 8.8.2. The flaw arises from insufficient size validation in the received-packet parser, allowing an unauthenticated remote attacker to send crafted H.224 data in RTP within an H.323 call to overflow a cache...

Cisco Warns of Critical Flaw in Teleconferencing Gear

Cisco Systems is warning customers of a critical vulnerability affecting three of its TelePresence MCU platform models. The flaw could give attackers the ability to remotely execute code on impacted systems or create conditions favorable to a denial-of-service DoS attack. According to an advisory...

Cisco TelePresence VCS Denial of Service Vulnerability (cisco-sa-20170125-expressway)

A vulnerability in the received packet parser of Cisco TelePresence Video Communication Server VCS software could allow an unauthenticated, remote attacker to cause a reload of the affected system, resulting in a denial of service DoS condition. SPDX-FileCopyrightText: 2017 Greenbone AG Some text...

Cisco TelePresence Multipoint Control Unit Remote Code Execution Vulnerability

A vulnerability in a proprietary device driver in the kernel of Cisco TelePresence Multipoint Control Unit MCU Software could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service DoS condition. SPDX-FileCopyrightText: 2017 Greenbone AG Some text...