Lucene search
K

10 matches found

BDU FSTEC
BDU FSTEC
added 2019/04/30 12:0 a.m.3 views

The vulnerability of the FindMe function in the microprogramming software of Cisco TelePresence Video Communication Server and the Cisco Expressway software allows a perpetrator to perform arbitrary actions within the vulnerable system.

The vulnerability of the FindMe function in the microprogramming software of Cisco TelePresence Video Communication Server and the Cisco Expressway software is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions o...

7.8CVSS6.7AI score0.00119EPSS
Exploits0References3
OSV
OSV
added 2019/04/18 1:29 a.m.1 views

CVE-2019-1722

A vulnerability in the FindMe feature of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected system. The vulnerability is due ...

6.5CVSS6.7AI score
Exploits0References2
NVD
NVD
added 2019/04/18 1:29 a.m.15 views

CVE-2019-1722

A vulnerability in the FindMe feature of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected system. The vulnerability is due ...

6.5CVSS6.7AI score0.00119EPSS
Exploits0References2
Prion
Prion
added 2019/04/18 1:29 a.m.19 views

Cross site request forgery (csrf)

A vulnerability in the FindMe feature of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected system. The vulnerability is due ...

4.3CVSS6.6AI score0.00119EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2019/04/18 12:20 a.m.7 views

CVE-2019-1722 Cisco Expressway Series and Cisco TelePresence Video Communication Server Cross-Site Request Forgery Vulnerability

A vulnerability in the FindMe feature of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected system. The vulnerability is due ...

6.5CVSS7.2AI score0.00119EPSS
Exploits0References2
Cvelist
Cvelist
added 2019/04/18 12:20 a.m.17 views

CVE-2019-1722 Cisco Expressway Series and Cisco TelePresence Video Communication Server Cross-Site Request Forgery Vulnerability

A vulnerability in the FindMe feature of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected system. The vulnerability is due ...

6.5CVSS6.7AI score0.00119EPSS
Exploits0References2
Prion
Prion
added 2018/08/26 9:29 p.m.11 views

Design/Logic Flaw

Ovation FindMe 1.4-1083-1 is intended to support transmission of network traffic from covert video recorders but does not properly disrupt binary analysis for discovering the product's capabilities or purpose. This makes it easier for adversaries to detect the covert operation. Specifically, the...

5CVSS7.5AI score0.00372EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2018/08/26 9:29 p.m.10 views

CVE-2018-15885

Ovation FindMe 1.4-1083-1 is intended to support transmission of network traffic from covert video recorders but does not properly disrupt binary analysis for discovering the product's capabilities or purpose. This makes it easier for adversaries to detect the covert operation. Specifically, the...

7.5CVSS7.5AI score0.00372EPSS
Exploits1References1
Cvelist
Cvelist
added 2018/08/26 9:0 p.m.14 views

CVE-2018-15885

Ovation FindMe 1.4-1083-1 is intended to support transmission of network traffic from covert video recorders but does not properly disrupt binary analysis for discovering the product's capabilities or purpose. This makes it easier for adversaries to detect the covert operation. Specifically, the...

7.5AI score0.00372EPSS
Exploits1References1
CVE
CVE
added 2018/08/26 9:0 p.m.36 views

CVE-2018-15885

Ovation FindMe 1.4-1083-1 is reported vulnerable due to obfuscation/packing that hinders binary analysis of its capabilities. The description states the product uses a compression technique to obscure certain libraries, relies on a TLS callback and an extra executable to enable these libraries an...

7.5CVSS7.4AI score0.00372EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder