Cisco Telepresence Video Communication Server Vcs Expressway
Monthly
Improper link resolution in Cisco Expressway Series (TelePresence VCS Expressway lineage) lets a local attacker holding a valid low-privileged account trick a component running at higher privilege into following an attacker-controlled link, producing file read or overwrite with high confidentiality, integrity, and availability impact (CVSS 3.1 base 7.0). Real-world risk is strongly tempered by the exploitability metrics: the attacker must already be present on the appliance (AV:L), must authenticate with low privileges (PR:L), and must satisfy a non-trivial high-complexity precondition such as a race or specific filesystem state (AC:H), with no user interaction (UI:N) and no remote or unauthenticated path indicated. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
Incorrect permission assignments in Cisco Expressway Series (CWE-732) can let a low-privileged local user read or modify protected resources, producing high confidentiality, integrity, and availability impact. Cisco addressed this issue, along with other internally discovered hardening problems, in Expressway Series hardening releases; no public exploit code was identified at time of analysis. The 7.8 CVSS score reflects local access requirements with low privileges, no user interaction, and unchanged scope, so this is not a remotely reachable or unauthenticated attack path.
Code injection in Cisco Expressway Series (TelePresence Video Communication Server Expressway) allows a local attacker holding a low-privileged account to execute arbitrary code on the appliance, with high confidentiality, integrity, and availability impact. Cisco found the flaw during an internal hardening review, and the CVSS 7.8 vector is local (AV:L) with low privileges required (PR:L), so risk is confined to deployments where lower-trust users already have credentials on the system. No public exploit code or confirmed active exploitation was identified at time of analysis.
Denial of service in Cisco Expressway Series allows remote unauthenticated attackers to disrupt availability by triggering uncaught exceptions in network-reachable service code, with CVSS 3.1 score 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The issue is an internally discovered CWE-248 weakness addressed in Cisco hardening releases; no public exploit or CISA KEV entry is identified at time of analysis. Affected deployments are Cisco Telepresence Video Communication Server (VCS)/Expressway instances that have not applied the fixed releases listed in Cisco advisory cisco-sa-exwy-hardening-FhcqBVcs.
Out-of-bounds write in Cisco Expressway Series (VCS Expressway) allows remote, unauthenticated attackers to trigger memory corruption that can cause high availability impact, such as process crashes or appliance instability, while confidentiality and integrity remain unaffected per the assessed CVSS vector. The issue is one of multiple internally discovered out-of-bounds write flaws addressed in Cisco hardening releases, and unpatched Expressway deployments are affected. No public exploit was identified at time of analysis, and no CISA KEV entry was provided.
Denial of service in Cisco Expressway Series allows unauthenticated remote attackers to crash the service by triggering a null pointer dereference (CWE-476). The issue is network-reachable, low complexity, and requires no user interaction, with impact limited to availability; exact affected and fixed releases must be confirmed in Cisco's advisory. No public exploit code was identified at time of analysis, and exposure is greatest for internet-facing or externally reachable Expressway deployments.
Network-reachable assertion failures in Cisco Expressway Series (TelePresence VCS Expressway) can terminate video and collaboration signaling services, allowing remote attackers to cause a denial-of-service condition without authentication or user interaction (CVSS 7.5). The vendor advisory describes multiple internally discovered CWE-617 reachable-assertion issues fixed in hardening releases; the exact affected and fixed versions are not specified in the provided data. No public exploit was identified at time of analysis, and there is no CISA KEV confirmation of active exploitation.
Unauthenticated remote command execution as root affects Cisco Expressway Series (Expressway-C and Expressway-E) deployments that expose the database service. The flaw combines reusable persistent cookies with a failure to validate client certificates when clustering TLS Verify Mode is set to Enabled, so an attacker in possession of the cookies can connect to the database service and invoke RPC commands to run arbitrary OS commands as root. The CVSS 3.1 score is 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H); no public exploit code was identified at time of analysis, and exploitation requires network reachability to the database and clustering service.
Insecure temporary file handling in Cisco Expressway Series allows a local, low-privileged attacker to tamper with data and disrupt services when another user or process interacts with an attacker-influenced temporary file (CVSS 6.6; AV:L/PR:L/UI:R, C:N/I:H/A:H). The flaw is tracked as CWE-377 and affects the Cisco Telepresence Video Communication Server (VCS) Expressway product line; the available CPE data does not identify a specific version range. No public exploit code or confirmed active exploitation was identified in the provided intelligence at time of analysis.
Information disclosure in Cisco Expressway Series (Expressway-C and Expressway-E) lets an unauthenticated, remote attacker read sensitive data from devices that use Mobile and Remote Access (MRA) provisioning, with a CVSS score of 5.3 and confidentiality-only impact. The root cause is insufficient authorization checks on HTTP requests handled during MRA provisioning, so a crafted URL can return information the requester is not authorized to see; no integrity or availability impact is assessed. No public exploit code or CISA KEV entry was identified at time of analysis, and realistic exposure is concentrated on internet-facing Expressway-E deployments that offer MRA.
Improper link resolution in Cisco Expressway Series (TelePresence VCS Expressway lineage) lets a local attacker holding a valid low-privileged account trick a component running at higher privilege into following an attacker-controlled link, producing file read or overwrite with high confidentiality, integrity, and availability impact (CVSS 3.1 base 7.0). Real-world risk is strongly tempered by the exploitability metrics: the attacker must already be present on the appliance (AV:L), must authenticate with low privileges (PR:L), and must satisfy a non-trivial high-complexity precondition such as a race or specific filesystem state (AC:H), with no user interaction (UI:N) and no remote or unauthenticated path indicated. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
Incorrect permission assignments in Cisco Expressway Series (CWE-732) can let a low-privileged local user read or modify protected resources, producing high confidentiality, integrity, and availability impact. Cisco addressed this issue, along with other internally discovered hardening problems, in Expressway Series hardening releases; no public exploit code was identified at time of analysis. The 7.8 CVSS score reflects local access requirements with low privileges, no user interaction, and unchanged scope, so this is not a remotely reachable or unauthenticated attack path.
Code injection in Cisco Expressway Series (TelePresence Video Communication Server Expressway) allows a local attacker holding a low-privileged account to execute arbitrary code on the appliance, with high confidentiality, integrity, and availability impact. Cisco found the flaw during an internal hardening review, and the CVSS 7.8 vector is local (AV:L) with low privileges required (PR:L), so risk is confined to deployments where lower-trust users already have credentials on the system. No public exploit code or confirmed active exploitation was identified at time of analysis.
Denial of service in Cisco Expressway Series allows remote unauthenticated attackers to disrupt availability by triggering uncaught exceptions in network-reachable service code, with CVSS 3.1 score 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The issue is an internally discovered CWE-248 weakness addressed in Cisco hardening releases; no public exploit or CISA KEV entry is identified at time of analysis. Affected deployments are Cisco Telepresence Video Communication Server (VCS)/Expressway instances that have not applied the fixed releases listed in Cisco advisory cisco-sa-exwy-hardening-FhcqBVcs.
Out-of-bounds write in Cisco Expressway Series (VCS Expressway) allows remote, unauthenticated attackers to trigger memory corruption that can cause high availability impact, such as process crashes or appliance instability, while confidentiality and integrity remain unaffected per the assessed CVSS vector. The issue is one of multiple internally discovered out-of-bounds write flaws addressed in Cisco hardening releases, and unpatched Expressway deployments are affected. No public exploit was identified at time of analysis, and no CISA KEV entry was provided.
Denial of service in Cisco Expressway Series allows unauthenticated remote attackers to crash the service by triggering a null pointer dereference (CWE-476). The issue is network-reachable, low complexity, and requires no user interaction, with impact limited to availability; exact affected and fixed releases must be confirmed in Cisco's advisory. No public exploit code was identified at time of analysis, and exposure is greatest for internet-facing or externally reachable Expressway deployments.
Network-reachable assertion failures in Cisco Expressway Series (TelePresence VCS Expressway) can terminate video and collaboration signaling services, allowing remote attackers to cause a denial-of-service condition without authentication or user interaction (CVSS 7.5). The vendor advisory describes multiple internally discovered CWE-617 reachable-assertion issues fixed in hardening releases; the exact affected and fixed versions are not specified in the provided data. No public exploit was identified at time of analysis, and there is no CISA KEV confirmation of active exploitation.
Unauthenticated remote command execution as root affects Cisco Expressway Series (Expressway-C and Expressway-E) deployments that expose the database service. The flaw combines reusable persistent cookies with a failure to validate client certificates when clustering TLS Verify Mode is set to Enabled, so an attacker in possession of the cookies can connect to the database service and invoke RPC commands to run arbitrary OS commands as root. The CVSS 3.1 score is 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H); no public exploit code was identified at time of analysis, and exploitation requires network reachability to the database and clustering service.
Insecure temporary file handling in Cisco Expressway Series allows a local, low-privileged attacker to tamper with data and disrupt services when another user or process interacts with an attacker-influenced temporary file (CVSS 6.6; AV:L/PR:L/UI:R, C:N/I:H/A:H). The flaw is tracked as CWE-377 and affects the Cisco Telepresence Video Communication Server (VCS) Expressway product line; the available CPE data does not identify a specific version range. No public exploit code or confirmed active exploitation was identified in the provided intelligence at time of analysis.
Information disclosure in Cisco Expressway Series (Expressway-C and Expressway-E) lets an unauthenticated, remote attacker read sensitive data from devices that use Mobile and Remote Access (MRA) provisioning, with a CVSS score of 5.3 and confidentiality-only impact. The root cause is insufficient authorization checks on HTTP requests handled during MRA provisioning, so a crafted URL can return information the requester is not authorized to see; no integrity or availability impact is assessed. No public exploit code or CISA KEV entry was identified at time of analysis, and realistic exposure is concentrated on internet-facing Expressway-E deployments that offer MRA.