PT-2015-1956

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server versions prior to a fixed version Description The issue exists due to insufficient input validation on the Call Policy Configuration page of the Cisco TelePresence Video Communication Server. This...

PT-2015-1958

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server version X8.5.2 Description The issue is caused by resource management errors in the device's firmware, allowing a remote attacker to cause a denial of service by sending network packets with...

PT-2015-1954

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server version X8.5.2 Description The issue is related to insufficient access control for certain features in the Cisco TelePresence Video Communication Server, which can be exploited by a remote attacker...

PT-2015-1960

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS Expressway version X8.5.1 Description The issue is related to improper authorization in the password-change feature of the administrative web interface, allowing remote authenticated users to...

PT-2015-1955

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS Expressway version X8.5.1 Description The issue is related to the System Snapshot feature, which lacks protection of sensitive data. This allows a remote authenticated user to obtain sensitive...

PT-2015-1959

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS Expressway version X8.5.2 Description The issue is related to errors in resource management, which can be exploited by a remote attacker to cause a denial of service. This can be achieved via...

PT-2015-1964

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server version X8.5.2 Description The issue allows remote authenticated users to execute arbitrary OS commands via crafted HTTP requests. This is due to insufficient input validation in the device's...

PT-2015-1961

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS Expressway version X8.5.2 Description The issue concerns the Configuration Log File component, which lacks protection of sensitive data. This allows a remote authenticated user to obtain...

Cisco TelePresence Video Communication Server Expressway Password Hash Acquisition Vulnerability

Cisco TelePresence Video Communication Server is a video conferencing solution that integrates h.323 and SIP. A security vulnerability exists in Cisco TelePresence Video Communication Server Expressway that allows an authenticated user to download a snapshot of the system and obtain password hash...

Cisco TelePresence Video Communication Server Expressway Denial of Service Vulnerability

Cisco TelePresence Video Communication Server is a video conferencing solution that integrates h.323 and SIP. A security vulnerability exists in Cisco TelePresence Video Communication Server Expressway that allows authenticated users to send special authentication messages for denial of service...

Cisco TelePresence Video Communication Server WEB Interface Arbitrary Command Execution Vulnerability

Cisco TelePresence Video Communication Server is a video conferencing solution that integrates h.323 and SIP. The Cisco TelePresence Video Communication Server WEB interface has a security vulnerability that allows remote authenticated users to send special parameter data and execute arbitrary...

CVE-2015-0772: Undefined Security Weakness

Cisco TelePresence Video Communication Server VCS X8.5RC4 allows remote attackers to cause a denial of service CPU consumption or device outage via a crafted SDP parameter-negotiation request in an SDP session during a SIP connection, aka Bug ID CSCut42422...

PT-2015-1322

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS version X8.5RC4 Description The issue is caused by resource management errors in the device's software. It allows a remote attacker to cause a denial of service, potentially leading to CPU...

Cisco TelePresence Video Communication Server Overview Web Page Cross-Site Scripting Vulnerability

Cisco TelePresence Video Communication Server VCS is a telepresence video communication server from Cisco that integrates with Unified Communications and voice communication environments to provide the best possible experience for end users using a variety of communication tools. A cross-site...

CVE-2015-0752

Cross-site scripting XSS vulnerability in Cisco TelePresence Video Communication Server VCS X8.5.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCut27635...

CVE-2015-0752: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco TelePresence Video Communication Server VCS X8.5.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCut27635...

PT-2015-1928

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server version X8.5.1 Description The issue is related to a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via a crafted URL. This is due to the...

CVE-2015-0653

The management interface in Cisco TelePresence Video Communication Server VCS and Cisco Expressway before X7.2.4, X8 before X8.1.2, and X8.2 before X8.2.2 and Cisco TelePresence Conductor before X2.3.1 and XC2.4 before XC2.4.1 allows remote attackers to bypass authentication via crafted login...

CVE-2015-0652: Improper Input Validation

The Session Description Protocol SDP implementation in Cisco TelePresence Video Communication Server VCS and Cisco Expressway before X8.2 and Cisco TelePresence Conductor before XC2.4 allows remote attackers to cause a denial of service mishandled exception and device reload via a crafted media...

CVE-2015-0653: Improper Authentication

The management interface in Cisco TelePresence Video Communication Server VCS and Cisco Expressway before X7.2.4, X8 before X8.1.2, and X8.2 before X8.2.2 and Cisco TelePresence Conductor before X2.3.1 and XC2.4 before XC2.4.1 allows remote attackers to bypass authentication via crafted login...