Cisco Expressway Vulnerabilità

Sequenza temporale

Versione

X8.64
X8.13
X8.1.13
X8.1.23
X8.23

Contromisure

Official Fix29
Temporary Fix0
Workaround0
Unavailable0
Not Defined5

Sfruttabilità

High0
Functional0
Proof-of-Concept1
Unproven0
Not Defined33

Accesso al vettore

Not Defined0
Physical0
Local1
Adjacent0
Network33

Autenticazione

Not Defined0
High7
Low13
None14

Interazione dell'utente

Not Defined0
Required4
None30

C3BM Index

L'anno scorso

CVSSv3 Base

≤10
≤20
≤30
≤40
≤54
≤66
≤710
≤811
≤92
≤101

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤54
≤68
≤712
≤87
≤93
≤100

VulDB

≤10
≤20
≤30
≤40
≤59
≤64
≤77
≤812
≤92
≤100

NVD

≤10
≤20
≤30
≤40
≤54
≤62
≤74
≤84
≤95
≤100

CNA

≤10
≤20
≤30
≤40
≤54
≤61
≤73
≤81
≤94
≤104

Fornitore

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 giorni

<1k0
<2k0
<5k1
<10k20
<25k13
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k21
<2k6
<5k3
<10k3
<25k1
<50k0
<100k0
≥100k0

Sfrutta il volume del mercato

L'anno scorso

🔴 CTI Attività

Affected Versions (78): X8.0, X8.1, X8.1.1, X8.1.2, X8.2, X8.2.1, X8.2.2, X8.5, X8.5.1, X8.5.2, X8.5.3, X8.6, X8.6.1, X8.7, X8.7.1, X8.7.2, X8.7.3, X8.8, X8.8.1, X8.8.2, X8.8.3, X8.9, X8.9.1, X8.9.2, X8.10.1, X8.10.2, X8.10.3, X8.10.4, X8.11, X8.11.1, X8.11.2, X8.11.3, X8.11.4, X12.0, X12.1, X12.2, X12.3, X12.4, X12.5, X12.5.1, X12.5.2, X12.5.3, X12.5.4, X12.5.5, X12.5.6, X12.5.7, X12.5.8, X12.5.9, X12.6, X12.6.1, X12.6.2, X12.6.3, X12.6.4, X12.7, X12.7.1, X14.0.1, X14.0.2, X14.0.3, X14.0.4, X14.0.5, X14.0.6, X14.0.7, X14.0.8, X14.0.9, X14.0.11, X14.2, X14.2.1, X14.2.2, X14.2.5, X14.2.6, X14.2.7, X14.3, X14.3.1, X14.3.2, XC4.3, XC4.3.1, XC4.3.2, XC4.3.3

Link to Product Website: https://www.cisco.com/

Tipo di software: Unified Communication Software

Data di pubblicazioneBaseTempVulnerabilità0dayOggiSfrConCTICVE
07/02/20247.67.5Cisco TelePresence Video Communication Server Expressway cross site request forgery$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-20254
07/02/20247.67.5Cisco TelePresence Video Communication Server Expressway cross site request forgery$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-20252
07/02/20246.56.5Cisco TelePresence Video Communication Server Expressway SOAP API cross site request forgery$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-20255
16/08/20237.06.9Cisco Expressway/TelePresence Video Communication Server escalazione di privilegi$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20209
08/06/20238.78.5Cisco Expressway/TelePresence Video Communication Server escalazione di privilegi$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20192
08/06/20239.29.0Cisco Expressway/TelePresence Video Communication Server escalazione di privilegi$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-20105
06/10/20224.34.1Cisco Expressway Series/TelePresence VCS REST API cross site request forgery$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-20853
06/10/20227.37.0Cisco Expressway-C/TelePresence VCS autenticazione debole$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2022-20814
07/07/20226.56.5Cisco Expressway/TelePresence Video Communication Server Web-based Management Interface/API Privilege Escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-20813
07/07/20227.67.5Cisco Expressway/TelePresence Video Communication Server Web-based Management Interface/API Privilege Escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-20812

24 non vengono visualizzate più voci

altre voci di Cisco

Interested in the pricing of exploits?

See the underground prices here!