CVE-2015-4316

Published: Aug 20, 2015Modified: May 6, 2026

5.5

Vector

AV:N/AC:L/Au:S/C:P/I:N/A:P

Exploitability: 8.0 / Impact: 4.9

Source: NVD

Description

The Mobile and Remote Access (MRA) endpoint-validation feature in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 improperly validates the phone line used for registration, which allows remote authenticated users to conduct impersonation attacks via a crafted registration, aka Bug ID CSCuv40396.

Affected (1)

Products: Cisco: Telepresence Video Communication Server Software

1 product

Telepresence Video Communication Server Software

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cisco Telepresence Video Communication Server Software	Version x8.5.2

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (6)

http://tools.cisco.com/security/center/viewAlert.x?alertId=40445

Source: psirt@cisco.com

Vendor Advisory

http://www.securityfocus.com/bid/76353

Source: psirt@cisco.com

http://www.securitytracker.com/id/1033282

Source: psirt@cisco.com

http://tools.cisco.com/security/center/viewAlert.x?alertId=40445

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/76353

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1033282

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.