Improper input validation in Cisco Telepresence_video_communication_server_software
CVE-2015-6410
The Mobile and Remote Access (MRA) services implementation in Cisco Unified Communications Manager mishandles edge-device identity validation, which allows remote attackers to bypass intended call-reception and call-setup restrictions by s…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.002 (39.0th percentile) — read the EPSS interpretation.
Affected products
- Cisco Telepresence_video_communication_server_software — versions x8.5
- N/a — versions n/a
Weakness classification (CWE)
References
- 1034377 (vdb-entry, x_refsource_SECTRACK)
- 20151209 Cisco Unified Communications Manager Mobile and Remote Access Services Identity Attack Vulnerability (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- 78741 (vdb-entry, x_refsource_BID)