Cisco Telepresence Video Communication Server Vulnérabilités

Chronologie

L'année dernière

Version

X8.5.214
X8.5.19
X8.66
X8.14
X8.24

Contre-mesures

Official Fix36
Temporary Fix0
Workaround1
Unavailable0
Not Defined20

Exploitabilité

High1
Functional0
Proof-of-Concept2
Unproven5
Not Defined49

Vecteur d'accès

Not Defined0
Physical0
Local6
Adjacent0
Network51

Authentification

Not Defined0
High5
Low24
None28

Interaction de l'utilisateur

Not Defined0
Required6
None51

C3BM Index

L'année dernière

CVSSv3 Base

≤10
≤20
≤30
≤40
≤57
≤618
≤717
≤811
≤92
≤102

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤57
≤621
≤720
≤85
≤94
≤100

VulDB

≤10
≤20
≤30
≤40
≤515
≤615
≤713
≤811
≤92
≤101

NVD

≤10
≤20
≤30
≤40
≤53
≤63
≤77
≤86
≤94
≤100

CNA

≤10
≤20
≤30
≤40
≤53
≤61
≤74
≤81
≤94
≤104

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k0
<2k0
<5k1
<10k29
<25k27
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k31
<2k6
<5k13
<10k4
<25k3
<50k0
<100k0
≥100k0

Exploiter le volume du marché

L'année dernière

🔴 CTI Activités

Affected Versions (83): X7.0, X8.0, X8.1, X8.1.1, X8.1.2, X8.2, X8.2.1, X8.2.2, X8.3, X8.4, X8.5, X8.5.1, X8.5.2, X8.5.3, X8.5PreAlpha7, X8.5RC4, X8.6, X8.6.1, X8.7, X8.7.1, X8.7.2, X8.7.3, X8.8, X8.8.1, X8.8.2, X8.8.3, X8.9, X8.9.1, X8.9.2, X8.10.1, X8.10.2, X8.10.3, X8.10.4, X8.11, X8.11.1, X8.11.2, X8.11.3, X8.11.4, X12.0, X12.1, X12.2, X12.3, X12.4, X12.5, X12.5.1, X12.5.2, X12.5.3, X12.5.4, X12.5.5, X12.5.6, X12.5.7, X12.5.8, X12.5.9, X12.6, X12.6.1, X12.6.2, X12.6.3, X12.6.4, X12.7, X12.7.1, X14.0.1, X14.0.2, X14.0.3, X14.0.4, X14.0.5, X14.0.6, X14.0.7, X14.0.8, X14.0.9, X14.0.11, X14.2, X14.2.1, X14.2.2, X14.2.5, X14.2.6, X14.2.7, X14.3, X14.3.1, X14.3.2, XC4.3, XC4.3.1, XC4.3.2, XC4.3.3

Link to Product Website: https://www.cisco.com/

Type de logiciel: Unified Communication Software

PubliéBaseTempVulnérabilité0dayAujourd'huiExpConCTICVE
07/02/20247.67.5Cisco TelePresence Video Communication Server Expressway cross site request forgery$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-20254
07/02/20247.67.5Cisco TelePresence Video Communication Server Expressway cross site request forgery$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-20252
07/02/20246.56.5Cisco TelePresence Video Communication Server Expressway SOAP API cross site request forgery$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2024-20255
16/08/20237.06.9Cisco Expressway/TelePresence Video Communication Server elévation de privilèges$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20209
08/06/20238.78.5Cisco Expressway/TelePresence Video Communication Server elévation de privilèges$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-20192
08/06/20239.29.0Cisco Expressway/TelePresence Video Communication Server elévation de privilèges$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-20105
07/07/20226.56.5Cisco Expressway/TelePresence Video Communication Server Web-based Management Interface/API Privilege Escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-20813
07/07/20227.67.5Cisco Expressway/TelePresence Video Communication Server Web-based Management Interface/API Privilege Escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-20812
28/05/20225.35.2Cisco Expressway Series Web-based Management Interface/API divulgation de l'information$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2022-20807
28/05/20225.35.2Cisco Expressway Series Web-based Management Interface/API divulgation de l'information$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-20806

47 plus d'entrées ne sont pas affichées

plus d'entrées par Cisco

Want to stay up to date on a daily basis?

Enable the mail alert feature now!