Skip to main content

Expressway CVE-2024-20252

HIGH
Cross-Site Request Forgery (CSRF) (CWE-352)
2024-02-07 psirt@cisco.com
8.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
8.8 HIGH
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Feb 07, 2024 - 17:15 nvd
HIGH 8.8

DescriptionNVD

Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to conduct cross-site request forgery (CSRF) attacks that perform arbitrary actions on an affected device. Note: "Cisco Expressway Series" refers to Cisco Expressway Control (Expressway-C) devices and Cisco Expressway Edge (Expressway-E) devices. For more information about these vulnerabilities, see the Details ["#details"] section of this advisory.

AnalysisAI

Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to conduct cross-site request forgery. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Cross-Site Request Forgery (CSRF) (CWE-352), which allows attackers to trick authenticated users into performing unintended actions. Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to conduct cross-site request forgery (CSRF) attacks that perform arbitrary actions on an affected device. Note: "Cisco Expressway Series" refers to Cisco Expressway Control (Expressway-C) devices and Cisco Expressway Edge (Expressway-E) devices. For more information about these vulnerabilities, see the Details ["#details"] section of this advisory. Affected products include: Cisco Expressway.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement anti-CSRF tokens, validate Origin/Referer headers, use SameSite cookie attribute.

CVE-2024-20254 HIGH
8.8 Feb 07

Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow

CVE-2017-3790 HIGH
8.6 Feb 01

A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Serv

CVE-2020-3596 HIGH
7.5 Oct 08

A vulnerability in the Session Initiation Protocol (SIP) of Cisco Expressway Series and Cisco TelePresence Video Communi

CVE-2018-5390 HIGH
7.5 Aug 06

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queu

CVE-2021-34716 HIGH
7.2 Aug 18

A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communicat

CVE-2021-34715 HIGH
7.2 Aug 18

A vulnerability in the image verification function of Cisco Expressway Series and Cisco TelePresence Video Communication

CVE-2024-20255 HIGH
7.1 Feb 07

A vulnerability in the SOAP API of Cisco Expressway Series and Cisco TelePresence Video Communication Server could allow

CVE-2016-9207 MEDIUM
6.5 Dec 14

A vulnerability in the HTTP traffic server component of Cisco Expressway could allow an unauthenticated, remote attacker

CVE-2022-20812 MEDIUM
6.5 Jul 06

Multiple vulnerabilities in the API and in the web-based management interface of Cisco Expressway Series and Cisco TeleP

CVE-2020-3482 MEDIUM
6.5 Nov 18

A vulnerability in the Traversal Using Relays around NAT (TURN) server component of Cisco Expressway software could allo

CVE-2022-20813 MEDIUM
5.9 Jul 06

Multiple vulnerabilities in the API and in the web-based management interface of Cisco Expressway Series and Cisco TeleP

CVE-2017-12287 MEDIUM
4.3 Oct 19

A vulnerability in the cluster database (CDB) management component of Cisco Expressway Series Software and Cisco TelePre

Share

CVE-2024-20252 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy