First published: Thu Aug 20 2015(Updated: )
The administrator web interface in Cisco TelePresence Video Communication Server (VCS) X8.5.2 allows remote authenticated users to execute arbitrary OS commands via crafted HTTP requests, aka Bug ID CSCuv11796.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco TelePresence Video Communication Server Firmware | =x8.5.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-4329 has a CVSS score that indicates it is a medium to high severity vulnerability.
To fix CVE-2015-4329, upgrade your Cisco TelePresence Video Communication Server to a version that is not affected by this vulnerability.
CVE-2015-4329 affects remote authenticated users of Cisco TelePresence Video Communication Server running version X8.5.2.
CVE-2015-4329 allows remote authenticated users to execute arbitrary OS commands, potentially compromising the system.
Currently, there are no documented workarounds for CVE-2015-4329, and it is recommended to apply updates.