Cisco Telepresence Video Communication Server Luki w zabezpieczeniach

Oś czasu

Ostatni rok

Wersja

X8.5.214
X8.5.19
X8.66
X8.14
X8.24

Przeciwdziałanie

Official Fix36
Temporary Fix0
Workaround1
Unavailable0
Not Defined20

Wykorzystywanie

High1
Functional0
Proof-of-Concept2
Unproven5
Not Defined49

Wektor dostępu

Not Defined0
Physical0
Local6
Adjacent0
Network51

Uwierzytelnianie

Not Defined0
High5
Low24
None28

Interakcja z użytkownikiem

Not Defined0
Required6
None51

C3BM Index

Ostatni rok

CVSSv3 Base

≤10
≤20
≤30
≤40
≤57
≤618
≤717
≤811
≤92
≤102

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤57
≤621
≤720
≤85
≤94
≤100

VulDB

≤10
≤20
≤30
≤40
≤515
≤615
≤713
≤811
≤92
≤101

NVD

≤10
≤20
≤30
≤40
≤53
≤63
≤77
≤86
≤94
≤100

CNA

≤10
≤20
≤30
≤40
≤53
≤61
≤74
≤81
≤94
≤104

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k0
<5k1
<10k29
<25k27
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k29
<2k7
<5k12
<10k6
<25k3
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

Ostatni rok

🔴 CTI Zajęcia

Affected Versions (83): X7.0, X8.0, X8.1, X8.1.1, X8.1.2, X8.2, X8.2.1, X8.2.2, X8.3, X8.4, X8.5, X8.5.1, X8.5.2, X8.5.3, X8.5PreAlpha7, X8.5RC4, X8.6, X8.6.1, X8.7, X8.7.1, X8.7.2, X8.7.3, X8.8, X8.8.1, X8.8.2, X8.8.3, X8.9, X8.9.1, X8.9.2, X8.10.1, X8.10.2, X8.10.3, X8.10.4, X8.11, X8.11.1, X8.11.2, X8.11.3, X8.11.4, X12.0, X12.1, X12.2, X12.3, X12.4, X12.5, X12.5.1, X12.5.2, X12.5.3, X12.5.4, X12.5.5, X12.5.6, X12.5.7, X12.5.8, X12.5.9, X12.6, X12.6.1, X12.6.2, X12.6.3, X12.6.4, X12.7, X12.7.1, X14.0.1, X14.0.2, X14.0.3, X14.0.4, X14.0.5, X14.0.6, X14.0.7, X14.0.8, X14.0.9, X14.0.11, X14.2, X14.2.1, X14.2.2, X14.2.5, X14.2.6, X14.2.7, X14.3, X14.3.1, X14.3.2, XC4.3, XC4.3.1, XC4.3.2, XC4.3.3

Link to Product Website: https://www.cisco.com/

Typ oprogramowania: Unified Communication Software

OpublikowanoBaseTempSłaby punkt0dayDzisiajWykPrzCTICVE
2024-02-077.67.5Cisco TelePresence Video Communication Server Expressway cross site request forgery$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-20254
2024-02-077.67.5Cisco TelePresence Video Communication Server Expressway cross site request forgery$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-20252
2024-02-076.56.5Cisco TelePresence Video Communication Server Expressway SOAP API cross site request forgery$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-20255
2023-08-167.06.9Cisco Expressway/TelePresence Video Communication Server privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20209
2023-06-088.78.5Cisco Expressway/TelePresence Video Communication Server privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-20192
2023-06-089.29.0Cisco Expressway/TelePresence Video Communication Server privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-20105
2022-07-076.56.5Cisco Expressway/TelePresence Video Communication Server Web-based Management Interface/API Privilege Escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-20813
2022-07-077.67.5Cisco Expressway/TelePresence Video Communication Server Web-based Management Interface/API Privilege Escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-20812
2022-05-285.35.2Cisco Expressway Series Web-based Management Interface/API information disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2022-20807
2022-05-285.35.2Cisco Expressway Series Web-based Management Interface/API information disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-20806

47 więcej wpisów nie jest pokazywanych

więcej wpisów autorstwa Cisco

Might our Artificial Intelligence support you?

Check our Alexa App!