TV
Product
Telepresence Video Communication Server Software
29
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 3Low 0
Watch
Add Telepresence Video Communication Server Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-1444 | 6.5 | Jul 7 | The Mobile and Remote Access (MRA) component in Cisco TelePresence Video Communication Server (VCS) X8.1 through X8.7 and Expressway X8.1 through X8.6 mishandles certificates,… Affected: x8.5.1; x8.5.2; x8.5.3; x8.6 |
| CVE-2016-1338 | 6.5 | Mar 12 | Cisco TelePresence Video Communication Server (VCS) X8.5.1 and X8.5.2 allows remote authenticated users to cause a denial of service (VoIP outage) via a crafted SIP message, aka… Affected: x8.5.1; x8.5.2 |
| CVE-2016-1316 | 5.3 | Feb 9 | Cisco TelePresence Video Communication Server (VCS) X8.1 through X8.7, as used in conjunction with Jabber Guest, allows remote attackers to obtain sensitive call-statistics… Affected: x8.1.1; x8.1.2; x8.1_base; x8.2.1; x8.2.2; x8.2_base; +7 more |
| CVE-2015-6410 | – | Dec 14 | The Mobile and Remote Access (MRA) services implementation in Cisco Unified Communications Manager mishandles edge-device identity validation, which allows remote attackers to… Affected: x8.5 |
| CVE-2015-6414 | – | Dec 13 | Cisco TelePresence Video Communication Server (VCS) X8.6 uses the same encryption key across different customers' installations, which makes it easier for local users to defeat… Affected: x8.6 |
| CVE-2015-6413 | – | Dec 13 | Cisco TelePresence Video Communication Server (VCS) Expressway X8.6 allows remote authenticated users to bypass intended read-only restrictions and upload Tandberg Linux Package… Affected: x8.6 |
| CVE-2015-6376 | – | Nov 21 | Cross-site request forgery (CSRF) vulnerability in Cisco TelePresence Video Communication Server (VCS) X8.5.1 allows remote attackers to hijack the authentication of arbitrary… Affected: x8.5.1 |
| CVE-2015-6318 | – | Oct 12 | Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.1 and X8.5.2 allows local users to write to arbitrary files via an unspecified symlink attack, aka Bug ID… Affected: x8.5.1; x8.5.2 |
| CVE-2015-4325 | – | Oct 12 | The process-management implementation in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows local users to gain privileges by terminating a… Affected: x8.5.2 |
| CVE-2015-4330 | – | Sep 2 | A local file script in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows local users to gain privileges for OS command execution via invalid parameters,… Affected: x8.5.2 |
| CVE-2015-6261 | – | Aug 26 | Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote authenticated users to bypass intended access restrictions and read configuration files by… Affected: x8.5.2 |
| CVE-2015-4318 | – | Aug 20 | Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote attackers to cause a denial of service via invalid variables in a GET request, aka Bug ID… Affected: x8.5.2 |
| CVE-2015-4329 | – | Aug 20 | The administrator web interface in Cisco TelePresence Video Communication Server (VCS) X8.5.2 allows remote authenticated users to execute arbitrary OS commands via crafted HTTP… Affected: x8.5.2 |
| CVE-2015-4319 | – | Aug 20 | The password-change feature in the administrative web interface in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.1 improperly performs authorization, which… Affected: x8.5.1 |
| CVE-2015-4316 | – | Aug 20 | The Mobile and Remote Access (MRA) endpoint-validation feature in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 improperly validates the phone line used… Affected: x8.5.2 |
| CVE-2015-4303 | – | Aug 20 | Cisco TelePresence Video Communication Server (VCS) X8.5.2 allows remote authenticated users to execute arbitrary commands in the context of the nobody user account via an… Affected: x8.5.2 |
| CVE-2015-4328 | – | Aug 20 | Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 improperly checks for a user account's read-only attribute, which allows remote authenticated users to… Affected: x8.5.2 |
| CVE-2015-4327 | – | Aug 20 | The CLI in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows local users to obtain root privileges by writing script arguments to an unspecified file,… Affected: x8.5.2 |
| CVE-2015-4320 | – | Aug 20 | The Configuration Log File component in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote authenticated users to obtain sensitive information by… Affected: x8.5.2 |
| CVE-2015-4317 | – | Aug 20 | Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote attackers to cause a denial of service via invalid variables in an authentication packet, aka… Affected: x8.5.2 |
| CVE-2015-4315 | – | Aug 20 | The Call Policy Configuration page in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.3 improperly validates external DTDs, which allows remote authenticated… Affected: x8.5.3 |
| CVE-2015-4314 | – | Aug 20 | The System Snapshot feature in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.1 allows remote authenticated users to obtain sensitive password-hash… Affected: x8.5.1 |
| CVE-2015-0772 | – | Jun 12 | Cisco TelePresence Video Communication Server (VCS) X8.5RC4 allows remote attackers to cause a denial of service (CPU consumption or device outage) via a crafted SDP… Affected: x8.5 |
| CVE-2015-0653 | – | Mar 13 | The management interface in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X7.2.4, X8 before X8.1.2, and X8.2 before X8.2.2 and Cisco TelePresence… Affected: x7.2 before x7.2.4; x8.1 before x8.1.2; x8.2 before x8.2.2 |
| CVE-2015-0652 | – | Mar 13 | The Session Description Protocol (SDP) implementation in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X8.2 and Cisco TelePresence Conductor… Affected: through x8.1.1 |
| CVE-2014-3370 | – | Oct 19 | Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 allow remote attackers to cause a denial of service (device reload) via crafted SIP… Affected: through x8.1 |
| CVE-2014-3369 | – | Oct 19 | The SIP IX implementation in Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 allows remote attackers to cause a denial of service (device… Affected: through x8.1 |
| CVE-2014-3368 | – | Oct 19 | Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.2 allow remote attackers to cause a denial of service (device reload) via a high rate of… Affected: through x8.1 |
| CVE-2014-0662 | – | Jan 22 | The SIP module in Cisco TelePresence Video Communication Server (VCS) before 8.1 allows remote attackers to cause a denial of service (process failure) via a crafted SDP message,… Affected: through x7.2.2; x6.0; x6.1; x7.1; x7.2; x7.2.1 |
Showing 29