Cisco Telepresence Video Communication Server Software vulnerabilities, page 2
29 vulnerabilities
Known vulnerabilities in Cisco Telepresence Video Communication Server Software, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2015-6410ciscotelepresence_video_communication_server_software
EPSS score1.68%
The Mobile and Remote Access (MRA) services implementation in Cisco Unified Communications Manager mishandles edge-device identity validation, which allows remote attackers to bypass intended call-reception and call-setup restrictions by spoofing a user, aka Bug ID CSCuu97283.CVE-2015-6261ciscotelepresence_video_communication_server_softwareEPSS score1.55%
Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote authenticated users to bypass intended access restrictions and read configuration files by leveraging the Mobile and Remote Access (MRA) role and establishing a TFTP session, aka Bug ID CSCuv78531.CVE-2016-1316ciscotelepresence_video_communication_server_softwareEPSS score1.46%
Cisco TelePresence Video Communication Server (VCS) X8.1 through X8.7, as used in conjunction with Jabber Guest, allows remote attackers to obtain sensitive call-statistics information via a direct request to an unspecified URL, aka Bug ID CSCux73362.CVE-2016-1338ciscotelepresence_video_communication_server_softwareEPSS score1.63%
Cisco TelePresence Video Communication Server (VCS) X8.5.1 and X8.5.2 allows remote authenticated users to cause a denial of service (VoIP outage) via a crafted SIP message, aka Bug ID CSCuu43026.CVE-2016-1444ciscotelepresence_video_communication_server+1EPSS score1.20%
The Mobile and Remote Access (MRA) component in Cisco TelePresence Video Communication Server (VCS) X8.1 through X8.7 and Expressway X8.1 through X8.6 mishandles certificates, which allows remote attackers to bypass authentication via an arbitrary trusted certificate, aka Bug ID CSCuz64601.CVE-2014-0662ciscotelepresence_video_communication_server_software+1EPSS score1.95%
The SIP module in Cisco TelePresence Video Communication Server (VCS) before 8.1 allows remote attackers to cause a denial of service (process failure) via a crafted SDP message, aka Bug ID CSCue97632.CVE-2014-3369ciscoexpressway_software+1EPSS score2.37%
The SIP IX implementation in Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 allows remote attackers to cause a denial of service (device reload) via crafted SDP packets, aka Bug ID CSCuo42252.CVE-2014-3370ciscoexpressway_software+1EPSS score2.34%
Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 allow remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug IDs CSCum60442 and CSCum60447.CVE-2014-3368ciscoexpressway_software+1EPSS score3.95%
Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.2 allow remote attackers to cause a denial of service (device reload) via a high rate of crafted packets, aka Bug ID CSCui06507.