Unauthorized Access in Cisco TelePresence Video Communication Server

CVE-2015-6413

Summary

Cisco TelePresence Video Communication Server (VCS) Expressway X8.6 is susceptible to unauthorized access, enabling remote authenticated users to circumvent intended read-only restrictions. This security flaw allows these users to upload Tandberg Linux Package (TLP) files through the administrative interface, posing significant risks to the integrity and security of the affected system. For more details, refer to the vendor advisory and pertinent security references.

References