CVE-2016-1444

CVE-2016-1444 affects the Mobile and Remote Access (MRA) component of Cisco TelePresence VCS X8.1–X8.7 and Expressway X8.1–X8.6. The issue arises from improper certificate handling in MRA, allowing an unauthenticated, remote attacker to bypass authentication by presenting a trusted certificate an...

CVE-2016-1400

Cisco TelePresence Video Communications Server VCS X8.x before X8.7.2 allows remote attackers to cause a denial of service service disruption via a crafted URI in a SIP header, aka Bug ID CSCuy43258...

Design/Logic Flaw

Cisco TelePresence Video Communications Server VCS X8.x before X8.7.2 allows remote attackers to cause a denial of service service disruption via a crafted URI in a SIP header, aka Bug ID CSCuy43258...

CVE-2016-1400

Cisco TelePresence Video Communications Server VCS X8.x before X8.7.2 allows remote attackers to cause a denial of service service disruption via a crafted URI in a SIP header, aka Bug ID CSCuy43258...

CVE-2016-1400

Cisco TelePresence Video Communications Server (VCS) X8.x, prior to X8.7.2, is affected by CVE-2016-1400. A remote attacker can cause a denial of service by sending a crafted SIP header URI, due to a malformed SIP header handling in VCS. Affected product family: Cisco VCS; vulnerable component: S...

Cisco Video Communication Server Session Initiation Protocol Packet Processing Denial of Service Vulnerability (cisco-sa-20160516-vcs)

A vulnerability in the Session Initiation Protocol SIP implementation of the Cisco Video Communications Server VCS could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a...

Cisco Video Communication Server Session Initiation Protocol Packet Processing Denial of Service Vulnerability

A vulnerability in the Session Initiation Protocol SIP implementation of the Cisco Video Communications Server VCS could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to a malformed SIP header message. An attacker could exploit this...

Design/Logic Flaw

Cisco TelePresence Video Communication Server VCS X8.5.1 and X8.5.2 allows remote authenticated users to cause a denial of service VoIP outage via a crafted SIP message, aka Bug ID CSCuu43026...

CVE-2016-1338

Cisco TelePresence VCS (X8.5.1 and X8.5.2) is affected by a SIP message handling vulnerability that lets remote authenticated attackers cause a DoS (VoIP outage) via a crafted SIP message (Bug CSCuu43026). The root cause is incorrect SIP message processing. Impact is denial of service to VoIP cal...

CVE-2016-1338

Cisco TelePresence Video Communication Server VCS X8.5.1 and X8.5.2 allows remote authenticated users to cause a denial of service VoIP outage via a crafted SIP message, aka Bug ID CSCuu43026...

Design/Logic Flaw

Cisco TelePresence Video Communication Server VCS X8.1 through X8.7, as used in conjunction with Jabber Guest, allows remote attackers to obtain sensitive call-statistics information via a direct request to an unspecified URL, aka Bug ID CSCux73362...

CVE-2016-1316

Cisco TelePresence Video Communication Server VCS X8.1 through X8.7, as used in conjunction with Jabber Guest, allows remote attackers to obtain sensitive call-statistics information via a direct request to an unspecified URL, aka Bug ID CSCux73362...

CVE-2016-1316

Cisco TelePresence Video Communication Server (VCS) versions X8.1–X8.7, when used with Jabber Guest, have an information-disclosure vulnerability that allows an unauthenticated, remote attacker to obtain sensitive call-statistics via a direct request to an unspecified URL. Root cause: improper pr...

CVE-2016-1316

Cisco TelePresence Video Communication Server VCS X8.1 through X8.7, as used in conjunction with Jabber Guest, allows remote attackers to obtain sensitive call-statistics information via a direct request to an unspecified URL, aka Bug ID CSCux73362...

Cisco TelePresence Video Communication Server (VCS) Web UI Detection

Binary data ciscotelepresencevcswebuidetect.nbin...

Cisco TelePresence VCS 8.5.1 Unspecified XSRF (cisco-sa-20151120-tvcs)

According to its self-reported version, the instance of Cisco TelePresence Video Communication Server VCS running on the remote host is affected by an unspecified cross-site request forgery XSRF vulnerability. A remote attacker can exploit this by tricking a user of a web application into followi...

Cisco TelePresence VCS and VCS Expressway Multiple Vulnerabilities (Dec 2015)

Cisco TelePresence Video Communication Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2015-6414

Cisco TelePresence Video Communication Server VCS X8.6 uses the same encryption key across different customers' installations, which makes it easier for local users to defeat cryptographic protection mechanisms by leveraging knowledge of a key from another installation, aka Bug ID CSCuw64516...

CVE-2015-6413

Cisco TelePresence Video Communication Server VCS Expressway X8.6 allows remote authenticated users to bypass intended read-only restrictions and upload Tandberg Linux Package TLP files by visiting an administrative page, aka Bug ID CSCuw55651...

Design/Logic Flaw

Cisco TelePresence Video Communication Server VCS Expressway X8.6 allows remote authenticated users to bypass intended read-only restrictions and upload Tandberg Linux Package TLP files by visiting an administrative page, aka Bug ID CSCuw55651...