CVE-2016-1400

Cisco TelePresence Video Communications Server (VCS) X8.x, prior to X8.7.2, is affected by CVE-2016-1400. A remote attacker can cause a denial of service by sending a crafted SIP header URI, due to a malformed SIP header handling in VCS. Affected product family: Cisco VCS; vulnerable component: S...

Cisco Video Communication Server Session Initiation Protocol Packet Processing Denial of Service Vulnerability (cisco-sa-20160516-vcs)

A vulnerability in the Session Initiation Protocol SIP implementation of the Cisco Video Communications Server VCS could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a...

Cisco Video Communication Server Session Initiation Protocol Packet Processing Denial of Service Vulnerability

A vulnerability in the Session Initiation Protocol SIP implementation of the Cisco Video Communications Server VCS could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to a malformed SIP header message. An attacker could exploit this...

Design/Logic Flaw

Cisco TelePresence Video Communication Server VCS X8.5.1 and X8.5.2 allows remote authenticated users to cause a denial of service VoIP outage via a crafted SIP message, aka Bug ID CSCuu43026...

CVE-2016-1338

Cisco TelePresence VCS (X8.5.1 and X8.5.2) is affected by a SIP message handling vulnerability that lets remote authenticated attackers cause a DoS (VoIP outage) via a crafted SIP message (Bug CSCuu43026). The root cause is incorrect SIP message processing. Impact is denial of service to VoIP cal...

CVE-2016-1338

Cisco TelePresence Video Communication Server VCS X8.5.1 and X8.5.2 allows remote authenticated users to cause a denial of service VoIP outage via a crafted SIP message, aka Bug ID CSCuu43026...

Design/Logic Flaw

Cisco TelePresence Video Communication Server VCS X8.1 through X8.7, as used in conjunction with Jabber Guest, allows remote attackers to obtain sensitive call-statistics information via a direct request to an unspecified URL, aka Bug ID CSCux73362...

CVE-2016-1316

Cisco TelePresence Video Communication Server VCS X8.1 through X8.7, as used in conjunction with Jabber Guest, allows remote attackers to obtain sensitive call-statistics information via a direct request to an unspecified URL, aka Bug ID CSCux73362...

CVE-2016-1316

Cisco TelePresence Video Communication Server (VCS) versions X8.1–X8.7, when used with Jabber Guest, have an information-disclosure vulnerability that allows an unauthenticated, remote attacker to obtain sensitive call-statistics via a direct request to an unspecified URL. Root cause: improper pr...

CVE-2016-1316

Cisco TelePresence Video Communication Server VCS X8.1 through X8.7, as used in conjunction with Jabber Guest, allows remote attackers to obtain sensitive call-statistics information via a direct request to an unspecified URL, aka Bug ID CSCux73362...

Cisco TelePresence Video Communication Server (VCS) Web UI Detection

Binary data ciscotelepresencevcswebuidetect.nbin...

Cisco TelePresence VCS 8.5.1 Unspecified XSRF (cisco-sa-20151120-tvcs)

According to its self-reported version, the instance of Cisco TelePresence Video Communication Server VCS running on the remote host is affected by an unspecified cross-site request forgery XSRF vulnerability. A remote attacker can exploit this by tricking a user of a web application into followi...

Cisco TelePresence VCS and VCS Expressway Multiple Vulnerabilities (Dec 2015)

Cisco TelePresence Video Communication Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2015-6414

Cisco TelePresence Video Communication Server VCS X8.6 uses the same encryption key across different customers' installations, which makes it easier for local users to defeat cryptographic protection mechanisms by leveraging knowledge of a key from another installation, aka Bug ID CSCuw64516...

CVE-2015-6413

Cisco TelePresence Video Communication Server VCS Expressway X8.6 allows remote authenticated users to bypass intended read-only restrictions and upload Tandberg Linux Package TLP files by visiting an administrative page, aka Bug ID CSCuw55651...

Design/Logic Flaw

Cisco TelePresence Video Communication Server VCS Expressway X8.6 allows remote authenticated users to bypass intended read-only restrictions and upload Tandberg Linux Package TLP files by visiting an administrative page, aka Bug ID CSCuw55651...

CVE-2015-6414

Cisco TelePresence Video Communication Server (VCS) X8.6 uses a single encryption key shared across different customer installations, enabling a local attacker who knows a key from another installation to bypass cryptographic protections and potentially read sensitive data. This vulnerability ste...

CVE-2015-6413

Cisco TelePresence Video Communication Server VCS Expressway X8.6 allows remote authenticated users to bypass intended read-only restrictions and upload Tandberg Linux Package TLP files by visiting an administrative page, aka Bug ID CSCuw55651...

CVE-2015-6413

Cisco TelePresence VCS Expressway X8.6 contains a web‑framework access control flaw that allows remote authenticated users to bypass read‑only restrictions and upload Tandberg Linux Package (TLP) files by visiting an administrative page (CVE-2015-6413). Root cause: missing authorization checks on...

Cisco TelePresence Video Communication Server Expressway Web Framework Code Unauthorized Access Vulnerability

A vulnerability in the web framework code of Cisco TelePresence Video Communication Server VCS Expressway could allow an authenticated, remote attacker to install Tandberg Linux Packages TLPs without proper authorization. The vulnerability is due to missing authorization checks on certain...