CVE-2015-0653

Published: Mar 13, 2015Modified: May 6, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The management interface in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X7.2.4, X8 before X8.1.2, and X8.2 before X8.2.2 and Cisco TelePresence Conductor before X2.3.1 and XC2.4 before XC2.4.1 allows remote attackers to bypass authentication via crafted login parameters, aka Bug IDs CSCur02680 and CSCur05556.

Affected (8)

Products: Cisco: Expressway Software, Telepresence Conductor, Telepresence Video Communication Server Software

Cisco

3 products

Expressway Software

Telepresence Conductor

Telepresence Video Communication Server Software

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Cisco Expressway Software	x7.2 ≤ version < x7.2.4
Cisco Expressway Software	x8.1 ≤ version < x8.1.2
Cisco Expressway Software	x8.2 ≤ version < x8.2.2
Cisco Telepresence Conductor	x2.3 ≤ version < x2.3.1
Cisco Telepresence Conductor	xc2.4 ≤ version < xc2.4.1
Cisco Telepresence Video Communication Server Software	x7.2 ≤ version < x7.2.4
Cisco Telepresence Video Communication Server Software	x8.1 ≤ version < x8.1.2
Cisco Telepresence Video Communication Server Software	x8.2 ≤ version < x8.2.2