VDB
BDU%3A2024-01336
BDU%3A2024-01336
PUBLISHED
CVSS 9.600000381469727 CRITICAL
Уязвимость прикладного программного интерфейса устройств управления конференц-связью Cisco Expressway Series и Cisco Telepresence VCS, позволяющая нарушителю осуществить CSRF-атаку
Risk Scores
CVSS 3.1
9.600000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cisco | cisco_tele_presence_video_communication_serve\/vcs\/_expressway | x8.5.1 |
| Cisco Systems Inc. | TelePresence Video Communication Server, Cisco Expressway | |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.5.1, X8.5.3, X8.5 |
Timeline
- Feb 7, 2024 CVE Published
- Feb 7, 2024 PoC Published
- Feb 8, 2024 PoC Published
- Feb 8, 2024 PoC Published
- Feb 8, 2024 PoC Published
- Feb 8, 2024 PoC Published
- Feb 8, 2024 PoC Published
- Feb 16, 2024 CVE Updated
- Mar 1, 2024 PoC Published