Cisco TelePresence Management Suite Software Vulnerability Could Lead to Cross-Site Scripting Attacks

CVE-2023-20249

Summary

A vulnerability exists in the web-based management interface of Cisco TelePresence Management Suite (TMS) Software that can be exploited by an authenticated remote attacker to perform a cross-site scripting (XSS) attack. The root cause of this vulnerability lies in the insufficient input validation implemented within the management interface. By manipulating specific data fields within the interface, an attacker could insert malicious scripts, allowing execution of arbitrary code in the context of the affected interface. This could also lead to unauthorized access to sensitive information stored in the user's browser.

References