medium5.3
CVE-2017-3815
An API Privilege vulnerability in Cisco TelePresence Server Software could allow an unauthenticated, remote attacker to emulate Cisco TelePresence Server endpo…
Impact
An API Privilege vulnerability in Cisco TelePresence Server Software could allow an unauthenticated, remote attacker to emulate Cisco TelePresence Server endpoints. Affected Products: This vulnerability affects Cisco TelePresence Server MSE 8710 Processors that are running a software release prior to Cisco TelePresence Software Release 4.3 and are running in locally managed mode. The vulnerable API was deprecated in Cisco TelePresence Software Release 4.3. More Information: CSCvc37616.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Telepresence Server Software | Versions 4.2\(4.17\), 4.2\(4.18\), 4.2\(4.19\) |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/96922
- http://www.securitytracker.com/id/1038035
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-tps
- http://www.securityfocus.com/bid/96922
- http://www.securitytracker.com/id/1038035
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-tps