CVE-2016-9207: Input Validation
A vulnerability in the HTTP traffic server component of Cisco Expressway could allow an unauthenticated, remote attacker to initiate TCP connections to arbitrary hosts. This does not allow for full traffic proxy through the Expressway. Affected Products: This vulnerability affects Cisco Expressway Series Software and Cisco TelePresence Video Communication Server (VCS). More Information: CSCvc10834. Known Affected Releases: X8.7.2 X8.8.3. Known Fixed Releases: X8.9.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9207?
CVE-2016-9207 has been assigned a medium severity rating due to its potential for unauthorized TCP connections.
How do I fix CVE-2016-9207?
To mitigate CVE-2016-9207, upgrade your Cisco Expressway to a non-vulnerable version such as X8.8.4 or later.
What products are affected by CVE-2016-9207?
CVE-2016-9207 affects Cisco Expressway versions X8.7.2 and X8.8.3.
Can CVE-2016-9207 allow full traffic proxy through the Expressway?
No, CVE-2016-9207 does not allow for full traffic proxy through the Expressway.
Who can exploit CVE-2016-9207?
An unauthenticated, remote attacker can exploit CVE-2016-9207 to initiate TCP connections.