Unscored severity · published Aug 20, 2015
CVE-2015-4329
The administrator web interface in Cisco TelePresence Video Communication Server (VCS) X8.5.2 allows remote authenticated users to execute arbitrary OS commands via crafted HTTP…
–
CVSS
2.3%
EPSS
No
On KEV
Description
The administrator web interface in Cisco TelePresence Video Communication Server (VCS) X8.5.2 allows remote authenticated users to execute arbitrary OS commands via crafted HTTP requests, aka Bug ID CSCuv11796.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TV
Telepresence Video Communication Server Software · Cisco
x8.5.2 · source: NVD
Affected product
TV
Telepresence Video Communication Server Software
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-4329
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-4329
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=40523
Third Party Advisory
http://www.securityfocus.com/bid/76395
Third Party Advisory
http://www.securitytracker.com/id/1033329
More from Telepresence Video Communication Server Software
8.8
CVE-2024-20252
Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to conduct cross-site…
6.5
CVE-2016-1444
The Mobile and Remote Access (MRA) component in Cisco TelePresence Video Communication Server (VCS) X8.1 through X8.7 and Expressway X8.1 through X8.6 mishandles certificates,…
6.5
CVE-2016-1338
Cisco TelePresence Video Communication Server (VCS) X8.5.1 and X8.5.2 allows remote authenticated users to cause a denial of service (VoIP outage) via a crafted SIP message, aka…
5.3
CVE-2016-1316
Cisco TelePresence Video Communication Server (VCS) X8.1 through X8.7, as used in conjunction with Jabber Guest, allows remote attackers to obtain sensitive call-statistics…
–
CVE-2015-6410
The Mobile and Remote Access (MRA) services implementation in Cisco Unified Communications Manager mishandles edge-device identity validation, which allows remote attackers to…