CVEvulnerability

CVE-2016-1387

9.8 CRITICAL Published 2016-05-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-05-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.0 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:C
Weaknesses
CWE-287

Description

The XML API in TelePresence Codec (TC) 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, and 7.3.5 and Collaboration Endpoint (CE) 8.0.0, 8.0.1, and 8.1.0 in Cisco TelePresence Software mishandles authentication, which allows remote attackers to execute control commands or make configuration changes via an API request, aka Bug ID CSCuz26935.

Affected configurations

• cisco telepresence tc software 7.2.0 • cisco telepresence tc software 7.2.1 • cisco telepresence tc software 7.3.0 • cisco telepresence tc software 7.3.1 • cisco telepresence tc software 7.3.2 • cisco telepresence tc software 7.3.3

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References