Test Kennung:	1.3.6.1.4.1.25623.1.0.105335
Kategorie:	CISCO
Titel:	Cisco TelePresence Video Communication Server (VCS) Multiple Vulnerabilities (Oct 2015)
Zusammenfassung:	Cisco TelePresence Video Communication Server Expressway is; prone to multiple vulnerabilities.
Beschreibung:	Summary: Cisco TelePresence Video Communication Server Expressway is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2015-4303: Command injection (Cisco-SA-20150812-CVE-2015-4303) - CVE-2015-4316: Insufficient validation of the registering phone line (Cisco-SA-20150813-CVE-2015-4316) - CVE-2015-4317: Denial of Service (DoS) (Cisco-SA-20150813-CVE-2015-4317) - CVE-2015-4318: Denial of Service (DoS) (Cisco-SA-20150813-CVE-2015-4318) - CVE-2015-4319: Insufficient enforcement in the authorization process (Cisco-SA-20150814-CVE-2015-4319) - CVE-2015-4320: Information disclosure (Cisco-SA-20150813-CVE-2015-4320) Affected Software/OS: Cisco TelePresence Video Communication Server Expressway version X8.5.2. Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-4303 BugTraq ID: 76322 http://www.securityfocus.com/bid/76322 Cisco Security Advisory: 20150812 Cisco TelePresence Video Communication Server Command Injection Vulnerability http://tools.cisco.com/security/center/viewAlert.x?alertId=40433 http://www.securitytracker.com/id/1033268 Common Vulnerability Exposure (CVE) ID: CVE-2015-4316 BugTraq ID: 76353 http://www.securityfocus.com/bid/76353 Cisco Security Advisory: 20150813 Cisco TelePresence Video Communication Server Expressway Access Vulnerability http://tools.cisco.com/security/center/viewAlert.x?alertId=40445 http://www.securitytracker.com/id/1033282 Common Vulnerability Exposure (CVE) ID: CVE-2015-4317 BugTraq ID: 76351 http://www.securityfocus.com/bid/76351 Cisco Security Advisory: 20150813 Cisco TelePresence Video Communication Server Expressway Denial of Service Vulnerability http://tools.cisco.com/security/center/viewAlert.x?alertId=40444 http://www.securitytracker.com/id/1033281 Common Vulnerability Exposure (CVE) ID: CVE-2015-4318 BugTraq ID: 76347 http://www.securityfocus.com/bid/76347 http://tools.cisco.com/security/center/viewAlert.x?alertId=40443 Common Vulnerability Exposure (CVE) ID: CVE-2015-4319 BugTraq ID: 76366 http://www.securityfocus.com/bid/76366 Cisco Security Advisory: 20150814 Cisco TelePresence Video Communication Server Expressway Access Vulnerability http://tools.cisco.com/security/center/viewAlert.x?alertId=40442 http://www.securitytracker.com/id/1033323 Common Vulnerability Exposure (CVE) ID: CVE-2015-4320 BugTraq ID: 76350 http://www.securityfocus.com/bid/76350 Cisco Security Advisory: 20150813 Cisco TelePresence Video Communication Server Expressway Information Disclosure Vulnerability http://tools.cisco.com/security/center/viewAlert.x?alertId=40441 http://www.securitytracker.com/id/1033284
Copyright	Copyright (C) 2015 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.