6.5

CVE-2016-1444

The Mobile and Remote Access (MRA) component in Cisco TelePresence Video Communication Server (VCS) X8.1 through X8.7 and Expressway X8.1 through X8.6 mishandles certificates, which allows remote attackers to bypass authentication via an arbitrary trusted certificate, aka Bug ID CSCuz64601.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Telepresence Video Communication Server Version x8.5 Update rc4
Cisco ≫ Telepresence Video Communication Server Software Version x8.5.1 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Software Version x8.5.2 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Software Version x8.5.3 SwEdition expressway
Cisco ≫ Telepresence Video Communication Server Software Version x8.6 SwEdition expressway
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.2% 0.642
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 3.9 2.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
NIST 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:P/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160706-vcs
Vendor Advisory
http://www.securityfocus.com/bid/91669
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1036237
Third Party Advisory
VDB Entry