Cisco Telepresence Video Communication Server X8.5.2 Execute Code Vulnerability
11 Nov. 2016
Summary
The administrative web interface in Cisco TelePresence Video Communication Server Expressway X8.5.2 allows remote authenticated users to execute arbitrary commands via crafted fields, aka Bug ID CSCuv12531.
Vulnerable Systems:
* Cisco Telepresence Video Communication Server X8.5.2
A vulnerability in the administrative web interface of Cisco TelePresence Video Communication Server Expressway could allow an authenticated, remote attacker to execute arbitrary commands on the affected system.
The vulnerability is due to the failure to properly sanitize user input passed to the affected system's scripts. An attacker could exploit this vulnerability by submitting crafted input to the affected fields of the web interface. Successful exploitation of this vulnerability could allow an attacker to run arbitrary commands on the system.
