CVSS: 5.3EPSS: 0%CPEs: 3EXPL: 0CVE-2017-3815
https://notcve.org/view.php?id=CVE-2017-3815
An API Privilege vulnerability in Cisco TelePresence Server Software could allow an unauthenticated, remote attacker to emulate Cisco TelePresence Server endpoints. Affected Products: This vulnerability affects Cisco TelePresence Server MSE 8710 Processors that are running a software release prior to Cisco TelePresence Software Release 4.3 and are running in locally managed mode. The vulnerable API was deprecated in Cisco TelePresence Software Release 4.3. More Information: CSCvc37616. Una vulnerabilidad de privilegios de API en Cisco TelePresence Server Software podría permitir que un atacante remoto no autenticado emule los puntos finales de Cisco TelePresence Server. • http://www.securityfocus.com/bid/96922 http://www.securitytracker.com/id/1038035 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-tps • CWE-319: Cleartext Transmission of Sensitive Information •
CVSS: 6.5EPSS: 0%CPEs: 18EXPL: 0CVE-2016-1444
https://notcve.org/view.php?id=CVE-2016-1444
The Mobile and Remote Access (MRA) component in Cisco TelePresence Video Communication Server (VCS) X8.1 through X8.7 and Expressway X8.1 through X8.6 mishandles certificates, which allows remote attackers to bypass authentication via an arbitrary trusted certificate, aka Bug ID CSCuz64601. El componente Mobile and Remote Access (MRA) en Cisco TelePresence Video Communication Server (VCS) X8.1 hasta la versión X8.7 y Expressway X8.1 hasta la versión X8.6 no maneja correctamente los certificados, lo que permite a atacantes remotos eludir la autenticación a través de un certificado confiable manipulado, también conocido como Bug ID CSCuz64601. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160706-vcs http://www.securityfocus.com/bid/91669 http://www.securitytracker.com/id/1036237 • CWE-20: Improper Input Validation •
CVSS: 8.0EPSS: 0%CPEs: 2EXPL: 0CVE-2016-1338
https://notcve.org/view.php?id=CVE-2016-1338
Cisco TelePresence Video Communication Server (VCS) X8.5.1 and X8.5.2 allows remote authenticated users to cause a denial of service (VoIP outage) via a crafted SIP message, aka Bug ID CSCuu43026. Cisco TelePresence Video Communication Server (VCS) X8.5.1 y X8.5.2 permite a usuarios remotos autenticados provocar una denegación de servicio (corte de VoIP) a través de un mensaje SIP manipulado, también conocida como Bug ID CSCuu43026. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160309-vcs • CWE-20: Improper Input Validation CWE-399: Resource Management Errors •
CVSS: 5.3EPSS: 0%CPEs: 13EXPL: 0CVE-2016-1316
https://notcve.org/view.php?id=CVE-2016-1316
Cisco TelePresence Video Communication Server (VCS) X8.1 through X8.7, as used in conjunction with Jabber Guest, allows remote attackers to obtain sensitive call-statistics information via a direct request to an unspecified URL, aka Bug ID CSCux73362. Cisco TelePresence Video Communication Server (VCS) X8.1 hasta la versión X8.7, tal como se utiliza en conjunción con Jabber Guest, permite a atacantes remotos obtener información de estadísticas de llamada sensible a través de una petición directa a una URL no especificada, también conocido como Bug ID CSCux73362. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160208-vcs http://www.securitytracker.com/id/1034956 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 4.0EPSS: 0%CPEs: 1EXPL: 0CVE-2015-6410
https://notcve.org/view.php?id=CVE-2015-6410
The Mobile and Remote Access (MRA) services implementation in Cisco Unified Communications Manager mishandles edge-device identity validation, which allows remote attackers to bypass intended call-reception and call-setup restrictions by spoofing a user, aka Bug ID CSCuu97283. La implementación de servicios Mobile and Remote Access (MRA) en Cisco Unified Communications Manager no maneja correctamente la validación de identidad en dispositivos edge, lo que permite a atacantes remotos eludir las restricciones destinadas a la recepción y configuración de llamadas, mediante la suplantación de un usuario, también conocida como Bug ID CSCuu97283. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-ucm http://www.securityfocus.com/bid/78741 http://www.securitytracker.com/id/1034377 • CWE-20: Improper Input Validation •