cisco-sa-expressway-filewrite-87Q5YRk: Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities
First published: Wed Mar 02 2022(Updated: )
Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker with read/write privileges to the application to write files or execute arbitrary code on the underlying operating system of an affected device as the root user. For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-filewrite-87Q5YRk
Credit: Jason Crowder the Cisco Advanced Security Initiatives Group
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Expressway Series | >=.0<14<=14.0<14.0.5 | 14.0.5 |
| Cisco TelePresence VCS | >=.0<14<=14.0<14.0.5 | 14.0.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-expressway-filewrite-87Q5YRk?
The severity of cisco-sa-expressway-filewrite-87Q5YRk is critical, with a severity value of 9.
What are the affected software versions for cisco-sa-expressway-filewrite-87Q5YRk?
The affected software versions for cisco-sa-expressway-filewrite-87Q5YRk are Cisco Expressway Series 14.0.0 up to 14.0.5 and Cisco TelePresence VCS 14.0.0 up to 14.0.5.
What is the vulnerability description of cisco-sa-expressway-filewrite-87Q5YRk?
Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker with read/write privileges to the application to write files or execute arbitrary code.
How can an attacker exploit cisco-sa-expressway-filewrite-87Q5YRk?
An attacker with read/write privileges to the application can exploit cisco-sa-expressway-filewrite-87Q5YRk by writing files or executing arbitrary code.
Where can I find more information about cisco-sa-expressway-filewrite-87Q5YRk?
More information about cisco-sa-expressway-filewrite-87Q5YRk can be found at the Cisco Security Advisory at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-filewrite-87Q5YRk.
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/software-canonical-lookup
- agent/references
- agent/title
- agent/severity
- agent/author
- agent/weakness
- agent/tags
- agent/description
- agent/event
- vendor/cisco
- canonical/cisco expressway series
- version/cisco expressway series/.0
- version/cisco expressway series/14.0
- canonical/cisco telepresence vcs
- version/cisco telepresence vcs/.0
- version/cisco telepresence vcs/14.0