Cisco TelePresence Video Communication Server Expressway Denial of Service Vulnerability (CNVD-2018-11975)

Cisco TelePresence Video Communication Server VCS Expressway is a TelePresence video communication server from Cisco that integrates with Unified Communications and voice communication environments to provide the best possible experience for end users using a variety of communication tools. A...

CVE-2018-0358: DEPRECATED: Uncontrolled File Descriptor Consumption

A vulnerability in the file descriptor handling of Cisco TelePresence Video Communication Server VCS Expressway could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to exhaustion of file descriptors while processing a high volume of...

PT-2018-8785

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS Expressway affected versions not specified Description A denial of service condition could be caused by an unauthenticated, remote attacker due to exhaustion of file descriptors while processin...

Cisco Expressway Series and Cisco TelePresence Denial of Service Vulnerability

Cisco Expressway Series Software and Cisco TelePresence Video Communication Server VCS Software are both telepresence video communication servers from Cisco that integrate with unified communications and voice communications environments to It can be integrated with unified communications and voi...

CVE-2017-12287

CVE-2017-12287 affects Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) Software. The issue stems from incomplete input validation of URL requests in the REST API of the CDB management component, allowing an authenticated, remote attacker to send a crafted URL that ...

CVE-2017-12287: Improper Input Validation

A vulnerability in the cluster database CDB management component of Cisco Expressway Series Software and Cisco TelePresence Video Communication Server VCS Software could allow an authenticated, remote attacker to cause the CDB process on an affected system to restart unexpectedly, resulting in a...

PT-2017-12461

Name of the Vulnerable Software and Affected Versions Cisco Expressway Series Software affected versions not specified Cisco TelePresence Video Communication Server VCS Software affected versions not specified Description The issue is related to incomplete input validation of URL requests by the...

Cisco TelePresence Video Communication Server Denial of Service Vulnerability (CNVD-2017-221679)

Cisco TelePresence Video Communication Server VCS is a telepresence video communication server from Cisco USA.Session Initiation Protocol SIP is one of the session initiation protocols. A denial of service vulnerability exists in SIP in Cisco TelePresence VCS. A remote attacker could exploit this...

CVE-2017-6790: Undefined Security Weakness

A vulnerability in the Session Initiation Protocol SIP on the Cisco TelePresence Video Communication Server VCS could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the targeted appliance. The vulnerability is due to excessive SIP traffic sent to the devic...

PT-2017-17323

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS affected versions not specified Description A vulnerability in the Session Initiation Protocol SIP could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on...

Design/Logic Flaw

A vulnerability in the HTTP traffic server component of Cisco Expressway could allow an unauthenticated, remote attacker to initiate TCP connections to arbitrary hosts. This does not allow for full traffic proxy through the Expressway. Affected Products: This vulnerability affects Cisco Expresswa...

CVE-2016-9207: Improper Input Validation

A vulnerability in the HTTP traffic server component of Cisco Expressway could allow an unauthenticated, remote attacker to initiate TCP connections to arbitrary hosts. This does not allow for full traffic proxy through the Expressway. Affected Products: This vulnerability affects Cisco Expresswa...

PT-2016-7703

Name of the Vulnerable Software and Affected Versions Cisco Expressway Series Software versions prior to X8.9 Cisco TelePresence Video Communication Server VCS versions prior to X8.9 Description A vulnerability in the HTTP traffic server component could allow an unauthenticated, remote attacker t...

CVE-2016-1468

The administrative web interface in Cisco TelePresence Video Communication Server Expressway X8.5.2 allows remote authenticated users to execute arbitrary commands via crafted fields, aka Bug ID CSCuv12531...

CVE-2016-1468: Improper Neutralization of Special Elements used in an OS Command

The administrative web interface in Cisco TelePresence Video Communication Server Expressway X8.5.2 allows remote authenticated users to execute arbitrary commands via crafted fields, aka Bug ID CSCuv12531...

PT-2016-4816

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server Expressway version X8.5.2 Description The administrative web interface in Cisco TelePresence Video Communication Server Expressway allows remote authenticated users to execute arbitrary commands vi...

Cisco TelePresence Video Communication Server Expressway Command Injection Vulnerability

Cisco TelePresence Video Communication Server Expressway is a TelePresence video communication server from Cisco that integrates with Unified Communications and voice communication environments to provide the best possible experience for end-users using a variety of communication tools. A remote...

CVE-2016-1444: Improper Input Validation

The Mobile and Remote Access MRA component in Cisco TelePresence Video Communication Server VCS X8.1 through X8.7 and Expressway X8.1 through X8.6 mishandles certificates, which allows remote attackers to bypass authentication via an arbitrary trusted certificate, aka Bug ID CSCuz64601...

PT-2016-2319

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server versions X8.1 through X8.7 Expressway versions X8.1 through X8.6 Description The issue exists due to insufficient input validation in the Mobile and Remote Access MRA component of the Cisco...

Cisco TelePresence Video Communication Server Denial of Service Vulnerability

Cisco TelePresence Video Communication Server VCS is a telepresence video communication server from Cisco that integrates with Unified Communications and voice communication environments to provide the best possible experience for end users using a variety of communication tools. A security...