Rapid7

vulnerability

Cisco TelePresence: Cisco TelePresence Video Communication Server Expressway Command Injection Vulnerability (CVE-2016-1468)

Severity
7
CVSS
(AV:N/AC:L/Au:S/C:P/I:P/A:P)
Published
Aug 7, 2016
Added
Aug 12, 2016
Modified
Nov 2, 2022

Description

The administrative web interface in Cisco TelePresence Video Communication Server Expressway X8.5.2 allows remote authenticated users to execute arbitrary commands via crafted fields, aka Bug ID CSCuv12531.

Solution

cisco-telepresence-upgrade-latest
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.