vulnerability

Cisco TelePresence: Cisco TelePresence XML Application Programming Interface Authentication Bypass Vulnerability (CVE-2016-1387)

Severity
9
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:C)
Published
2016-05-05
Added
2016-06-22
Modified
2022-11-02

Description

The XML API in TelePresence Codec (TC) 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, and 7.3.5 and Collaboration Endpoint (CE) 8.0.0, 8.0.1, and 8.1.0 in Cisco TelePresence Software mishandles authentication, which allows remote attackers to execute control commands or make configuration changes via an API request, aka Bug ID CSCuz26935.

Solution

cisco-telepresence-upgrade-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.