cisco-sa-20190605-vcs: Cisco TelePresence Video Communication Server and Cisco Expressway Series Server-Side Request Forgery Vulnerability
First published: Wed Jun 05 2019(Updated: )
A vulnerability in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway Series software could allow an unauthenticated, remote attacker to cause an affected system to send arbitrary network requests. The vulnerability is due to improper restrictions on network services in the affected software. An attacker could exploit this vulnerability by sending malicious requests to the affected system. A successful exploit could allow the attacker to send arbitrary network requests sourced from the affected system. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190605-vcs
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco TelePresence Video Communication Server Firmware | ||
| Cisco Expressway |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-20190605-vcs?
The severity of cisco-sa-20190605-vcs is classified as high due to the potential impact of remote, unauthenticated access.
How do I fix cisco-sa-20190605-vcs?
To address cisco-sa-20190605-vcs, update the Cisco TelePresence Video Communication Server and Cisco Expressway Series to the latest software versions.
Who is affected by cisco-sa-20190605-vcs?
Organizations using Cisco TelePresence Video Communication Server or Cisco Expressway Series are affected by cisco-sa-20190605-vcs.
What types of attacks can exploit cisco-sa-20190605-vcs?
cisco-sa-20190605-vcs can be exploited by unauthenticated remote attackers sending arbitrary network requests.
Is authentication required to exploit cisco-sa-20190605-vcs?
No, cisco-sa-20190605-vcs can be exploited without authentication.
- agent/type
- agent/event
- agent/last-modified-date
- collector/cisco-advisory
- source/Cisco
- agent/title
- agent/severity
- agent/weakness
- agent/references
- agent/description
- agent/first-publish-date
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/tags
- agent/softwarecombine
- vendor/cisco
- canonical/cisco telepresence video communication server firmware
- canonical/cisco expressway