CVE-2017-3815: Medium severity Cisco TelePresence Server software vulnerability
An API Privilege vulnerability in Cisco TelePresence Server Software could allow an unauthenticated, remote attacker to emulate Cisco TelePresence Server endpoints. Affected Products: This vulnerability affects Cisco TelePresence Server MSE 8710 Processors that are running a software release prior to Cisco TelePresence Software Release 4.3 and are running in locally managed mode. The vulnerable API was deprecated in Cisco TelePresence Software Release 4.3. More Information: CSCvc37616.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Cisco TelePresence Server MSE 8710 Processor (locally managed mode) / Cisco TelePresence Server Softwareto a version that resolves this vulnerability.Fixed in Cisco TelePresence Software Release 4.3Patch CSCvc37616
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3815?
CVE-2017-3815 has been rated as a high severity vulnerability due to its potential to allow unauthorized access to Cisco TelePresence Server Software.
How do I fix CVE-2017-3815?
To fix CVE-2017-3815, update the Cisco TelePresence Server Software to a patched version beyond 4.2(4.19).
What systems are affected by CVE-2017-3815?
CVE-2017-3815 affects Cisco TelePresence Server Software versions 4.2(4.17), 4.2(4.18), and 4.2(4.19) on MSE 8710 Processors.
Can CVE-2017-3815 be exploited remotely?
Yes, CVE-2017-3815 can be exploited remotely by an unauthenticated attacker through the API.
What type of vulnerability is CVE-2017-3815?
CVE-2017-3815 is classified as an API Privilege vulnerability.