A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker with read-write privileges on the application to perform a command injection attack that could re
A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker with read-write privileges on the application to perform a command injection attack that could result in remote code execution on an affected device. This vulnerability is due to insufficient validation of…
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.5.1, X8.5.3, X8.5, X8.6.1, X8.6, X8.1.1, X8.1.2, X8.1, X8.2.1, X8.2.2, X8.2, X8.7.1, X8.7.2, X8.7.3, X8.7, X8.8.1, X8.8.2, X8.8.3, X8.8, X8.9.1, X8.9.2, X8.9, X8.10.0, X8.10.1, X8.10.2, X8.10.3, X8.10.4, X12.5.8, X12.5.9, X12.5.0, X12.5.2, X12.5.7, X12.5.3, X12.5.4, X12.5.5, X12.5.1, X12.5.6, X12.6.0, X12.6.1, X12.6.2, X12.6.3, X12.6.4, X12.7.0, X12.7.1, X8.11.1, X8.11.2, X8.11.4, X8.11.3, X8.11.0, X14.0.1, X14.0.3, X14.0.2, X14.0.4, X14.0.5, X14.0.6, X14.0.7, X14.0.8, X14.0.9, X14.0.10, X14.0.11, X14.2.1, X14.2.2, X14.2.5, X14.2.6, X14.2.0, X14.2.7, X14.3.0 |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.