First published: Thu Aug 20 2015(Updated: )
Cisco TelePresence Video Communication Server (VCS) X8.5.2 allows remote authenticated users to execute arbitrary commands in the context of the nobody user account via an unspecified web-page parameter, aka Bug ID CSCuv12333.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco TelePresence Video Communication Server Firmware | =x8.5.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-4303 is classified as a medium-risk vulnerability that allows command execution by authenticated users.
To mitigate CVE-2015-4303, update Cisco TelePresence Video Communication Server to a version that is not affected by the vulnerability.
CVE-2015-4303 affects users of Cisco TelePresence Video Communication Server version X8.5.2.
Yes, CVE-2015-4303 can be exploited remotely as it allows authenticated users to execute commands.
CVE-2015-4303 impacts systems running the Cisco TelePresence Video Communication Server software.