cisco-sa-expressway-overwrite-3buqW8LH: Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities
Multiple vulnerabilities in the API and in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow a remote attacker to overwrite arbitrary files or conduct null byte poisoning attacks on an affected
Credit
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-expressway-overwrite-3buqW8LH?
The severity of cisco-sa-expressway-overwrite-3buqW8LH is critical with a CVSS score of 9.
How can a remote attacker exploit cisco-sa-expressway-overwrite-3buqW8LH vulnerability?
A remote attacker can exploit cisco-sa-expressway-overwrite-3buqW8LH by overwriting arbitrary files or conducting null byte poisoning attacks on an affected device.
Which Cisco products are affected by cisco-sa-expressway-overwrite-3buqW8LH vulnerability?
The Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) are affected by cisco-sa-expressway-overwrite-3buqW8LH vulnerability.
How do I fix cisco-sa-expressway-overwrite-3buqW8LH vulnerability?
To fix cisco-sa-expressway-overwrite-3buqW8LH vulnerability, update the affected devices to Cisco Expressway Series version 14.31 (late Apr 2023) or later.
What is CWE-36?
CWE-36 refers to a null byte poisoning vulnerability.