cisco-sa-20190605-vcs: Cisco TelePresence Video Communication Server and Cisco Expressway Series Server-Side Request Forgery Vulnerability
A vulnerability in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway Series software could allow an unauthenticated, remote attacker to cause an affected system to send arbitrary network requests. The vulnerability is due to improper restrictions on network services in the affected software. An attacker could exploit this vulnerability by sending malicious requests to the affected system. A successful exploit could allow the attacker to send arbitrary network requests sourced from the affected system. There are no workarounds that address this vulnerability.
This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190605-vcs
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-20190605-vcs?
The severity of cisco-sa-20190605-vcs is classified as high due to the potential impact of remote, unauthenticated access.
How do I fix cisco-sa-20190605-vcs?
To address cisco-sa-20190605-vcs, update the Cisco TelePresence Video Communication Server and Cisco Expressway Series to the latest software versions.
Who is affected by cisco-sa-20190605-vcs?
Organizations using Cisco TelePresence Video Communication Server or Cisco Expressway Series are affected by cisco-sa-20190605-vcs.
What types of attacks can exploit cisco-sa-20190605-vcs?
cisco-sa-20190605-vcs can be exploited by unauthenticated remote attackers sending arbitrary network requests.
Is authentication required to exploit cisco-sa-20190605-vcs?
No, cisco-sa-20190605-vcs can be exploited without authentication.