Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities

Vulnerability

The vulnerability resides in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS). An authenticated remote attacker with read/write privileges to the application can write arbitrary files or execute arbitrary code on the underlying operating system as the root user. [1] Affected versions include all releases prior to the fixed versions detailed in the Cisco advisory. [1]

Exploitation

An attacker must have valid credentials with read/write privileges to the application interface. [1] They can then craft malicious requests to the vulnerable API or web management interface to achieve file write or remote code execution. [1] No user interaction beyond the initial authentication is required from other users. [1]

Impact

Successful exploitation allows the attacker to write files or execute arbitrary code on the underlying operating system of the affected device with root privileges. [1] This leads to full compromise of the device's confidentiality, integrity, and availability, enabling complete control over the system. [1]

Mitigation

Cisco has released free software updates to address these vulnerabilities. [1] Customers should upgrade to the fixed versions indicated in the Cisco Security Advisory. [1] No workarounds are mentioned. [1] Consult the advisory for product-specific version information. [1]