cisco-sa-expressway-filewrite-87Q5YRk: Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities
Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker with read/write privileges to the application to write files or execute arbitrary code on the underlying operating system of an affected device as the root user. For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-filewrite-87Q5YRk
Credit
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-expressway-filewrite-87Q5YRk?
The severity of cisco-sa-expressway-filewrite-87Q5YRk is critical, with a severity value of 9.
What are the affected software versions for cisco-sa-expressway-filewrite-87Q5YRk?
The affected software versions for cisco-sa-expressway-filewrite-87Q5YRk are Cisco Expressway Series 14.0.0 up to 14.0.5 and Cisco TelePresence VCS 14.0.0 up to 14.0.5.
What is the vulnerability description of cisco-sa-expressway-filewrite-87Q5YRk?
Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker with read/write privileges to the application to write files or execute arbitrary code.
How can an attacker exploit cisco-sa-expressway-filewrite-87Q5YRk?
An attacker with read/write privileges to the application can exploit cisco-sa-expressway-filewrite-87Q5YRk by writing files or executing arbitrary code.
Where can I find more information about cisco-sa-expressway-filewrite-87Q5YRk?
More information about cisco-sa-expressway-filewrite-87Q5YRk can be found at the Cisco Security Advisory at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-filewrite-87Q5YRk.