Information disclosure in Cisco Telepresence_video_communication_server_software
CVE-2015-6414
Cisco TelePresence Video Communication Server (VCS) X8.6 uses the same encryption key across different customers' installations, which makes it easier for local users to defeat cryptographic protection mechanisms by leveraging knowledge of…
Vulnerability class: Information Disclosure
EPSS: 0.000 (11.9th percentile) — read the EPSS interpretation.
Affected products
- Cisco Telepresence_video_communication_server_software — versions x8.6
- N/a — versions n/a
Weakness classification (CWE)
References
- 1034429 (vdb-entry, x_refsource_SECTRACK)
- 79065 (vdb-entry, x_refsource_BID)
- 20151210 Cisco TelePresence Video Communication Server Information Disclosure Vulnerability (x_refsource_CISCO, vendor-advisory, Vendor Advisory)