imPC@ndo IT

Tracker / CVE-2015-0653

CVE-2015-0653

High 10.0

The management interface in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X7.2.4, X8 before X8.1.2, and X8.2 before X8.2.2 and Cisco TelePresence Conductor before X2.3.1 and XC2.4 before XC2.4.1 allows remote attackers to bypass authentication via crafted login parameters, aka Bug IDs CSCur02680 and CSCur05556.

Affected products and versions

cisco expressway_software · x7.2 → x7.2.4
cisco expressway_software · x8.1 → x8.1.2
cisco expressway_software · x8.2 → x8.2.2
cisco telepresence_conductor · x2.3 → x2.3.1
cisco telepresence_conductor · xc2.4 → xc2.4.1
cisco telepresence_video_communication_server_software · x7.2 → x7.2.4
cisco telepresence_video_communication_server_software · x8.1 → x8.1.2
cisco telepresence_video_communication_server_software · x8.2 → x8.2.2

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References