CVE-2015-4316: Input Validation
The Mobile and Remote Access (MRA) endpoint-validation feature in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 improperly validates the phone line used for registration, which allows remote authenticated users to conduct impersonation attacks via a crafted registration, aka Bug ID CSCuv40396.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4316?
CVE-2015-4316 is rated as high severity due to its potential for impersonation attacks.
How do I fix CVE-2015-4316?
To fix CVE-2015-4316, upgrade to Cisco TelePresence Video Communication Server version X8.5.3 or later.
What systems are affected by CVE-2015-4316?
CVE-2015-4316 affects Cisco TelePresence Video Communication Server Software X8.5.2.
What type of attack does CVE-2015-4316 allow?
CVE-2015-4316 allows remote authenticated users to conduct impersonation attacks.
Is CVE-2015-4316 exploitable without authentication?
No, CVE-2015-4316 requires remote authenticated access to exploit the vulnerability.