CVE-2018-15430

Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) are affected by an input-validation vulnerability in the management web interface. The issue stems from insufficient validation of the contents of update/upgrade packages, allowing an authenticated, remote attacker to...