WID-SEC-W-2024-0321

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Cisco Expressway: Mehrere Schwachstellen

view advisory published 2024-02-07

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Cisco Expressway ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, beliebigen Programmcode auszuführen oder einen Denial of Service Zustand herbeizuführen.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2024-20255UShigh7.1—
A vulnerability in the SOAP API of Cisco Expressway Series and Cisco TelePresence Video Communication Server could allow an unauthenticated, remote attacker to conduct a cross-site…
CVE-2024-20254UShigh8.8—
Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to conduct cross-site re…
CVE-2024-20252UShigh8.8—
Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to conduct cross-site re…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan