70 matches found
CVE-2015-6318
Cisco TelePresence Video Communication Server VCS Expressway X8.5.1 and X8.5.2 allows local users to write to arbitrary files via an unspecified symlink attack, aka Bug ID CSCuv11969...
CVE-2015-4325
CVE-2015-4325 affects Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2. The issue is in the process-management code: terminating a firestarter.py supervised process and triggering a restart via the root account allows local attackers to gain elevated privileges. The Cisco adv...
CVE-2015-6318: Improper Input Validation
Cisco TelePresence Video Communication Server VCS Expressway X8.5.1 and X8.5.2 allows local users to write to arbitrary files via an unspecified symlink attack, aka Bug ID CSCuv11969...
CVE-2015-4325: Undefined Security Weakness
The process-management implementation in Cisco TelePresence Video Communication Server VCS Expressway X8.5.2 allows local users to gain privileges by terminating a firestarter.py supervised process and then triggering the restart of a process by the root account, aka Bug ID CSCuv12272...
Cisco TelePresence VCS Expressway Process Management Elevation of Privilege Vulnerability
Cisco TelePresence VCS Expressway is a video conferencing application. A security vulnerability in the Cisco TelePresence VCS Expressway process management code allows local users to exploit the vulnerability to execute arbitrary commands with ROOT privileges...
CVE-2015-4330
A local file script in Cisco TelePresence Video Communication Server VCS Expressway X8.5.2 allows local users to gain privileges for OS command execution via invalid parameters, aka Bug ID CSCuv10556...
Command injection
A local file script in Cisco TelePresence Video Communication Server VCS Expressway X8.5.2 allows local users to gain privileges for OS command execution via invalid parameters, aka Bug ID CSCuv10556...
CVE-2015-4330
A local file script in Cisco TelePresence Video Communication Server VCS Expressway X8.5.2 allows local users to gain privileges for OS command execution via invalid parameters, aka Bug ID CSCuv10556...
PT-2015-6519
Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS Expressway version X8.5.2 Description A local file script issue allows local users to gain privileges for OS command execution via invalid parameters. Recommendations For Cisco TelePresence Vid...
CVE-2015-4330: Improper Neutralization of Special Elements used in an OS Command
A local file script in Cisco TelePresence Video Communication Server VCS Expressway X8.5.2 allows local users to gain privileges for OS command execution via invalid parameters, aka Bug ID CSCuv10556...
Cisco TelePresence Video Communication Server Expressway Information Disclosure Vulnerability (Cisco-SA-20150812-CVE-2015-4314)
A vulnerability in the System Snapshot of Cisco TelePresence Video Communication Server VCS Expressway could allow an authenticated, remote attacker to view sensitive data. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...
CVE-2015-6261
Cisco TelePresence Video Communication Server VCS Expressway X8.5.2 allows remote authenticated users to bypass intended access restrictions and read configuration files by leveraging the Mobile and Remote Access MRA role and establishing a TFTP session, aka Bug ID CSCuv78531...
Design/Logic Flaw
Cisco TelePresence Video Communication Server VCS Expressway X8.5.2 allows remote authenticated users to bypass intended access restrictions and read configuration files by leveraging the Mobile and Remote Access MRA role and establishing a TFTP session, aka Bug ID CSCuv78531...
CVE-2015-6261: Exposure of Sensitive Information to an Unauthorized Actor
Cisco TelePresence Video Communication Server VCS Expressway X8.5.2 allows remote authenticated users to bypass intended access restrictions and read configuration files by leveraging the Mobile and Remote Access MRA role and establishing a TFTP session, aka Bug ID CSCuv78531...
Cisco TelePresence VCS Expressway Series 8.5.1 Information Disclosure
According to its self-reported version, the instance of Cisco TelePresence Video Communication Server VCS Expressway running on the remote host is affected by an information disclosure vulnerability due to a flaw in the System Snapshot feature. An authenticated, remote attacker can download...
Cisco TelePresence VCS Expressway 8.5.3 XML External Entity (XXE) Injection
According to its self-reported version, the instance of Cisco TelePresence Video Communication Server VCS Expressway running on the remote host is affected by an XML External Entity XXE injection vulnerability due to insufficient validation of declared document type definitions DTD stored...
Cisco TelePresence VCS Expressway Series 8.5.2 Multiple Vulnerabilities
According to its self-reported version, the instance of Cisco TelePresence Video Communication Server VCS Expressway running on the remote host is affected by multiple vulnerabilities : - A command injection vulnerability exists in the web framework component due to insufficient validation of...
Design/Logic Flaw
Cisco TelePresence Video Communication Server VCS Expressway X8.5.2 allows remote attackers to cause a denial of service via invalid variables in a GET request, aka Bug ID CSCuv40528...
CVE-2015-4318
Cisco TelePresence Video Communication Server VCS Expressway X8.5.2 allows remote attackers to cause a denial of service via invalid variables in a GET request, aka Bug ID CSCuv40528...
CVE-2015-4319
The password-change feature in the administrative web interface in Cisco TelePresence Video Communication Server VCS Expressway X8.5.1 improperly performs authorization, which allows remote authenticated users to reset arbitrary active-user passwords via unspecified vectors, aka Bug ID CSCuv12338...