PT-2015-7237 · Cisco+1 · Cisco Telepresence Video Communication Server (Vcs) Expressway+1

Publicado 2015-12-13 · Atualizado 2016-12-07 · CVE-2015-6413

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server (VCS) Expressway version X8.6

Description The issue allows remote authenticated users to bypass intended read-only restrictions and upload Tandberg Linux Package (TLP) files by visiting an administrative page.

Recommendations For Cisco TelePresence Video Communication Server (VCS) Expressway version X8.6, consider restricting access to administrative pages until a fix is available. As a temporary workaround, limit the ability to upload TLP files to prevent potential exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-6413

Produtos afetados

Cisco Telepresence Video Communication Server (Vcs) Expressway

Tandberg Linux Package

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2015-6413 · Nota de Segurança
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-tvc · Aviso do Fabricante
• http://securitytracker.com/id/1034378 · Nota
• http://securityfocus.com/bid/79088 · Nota