API Privilege Vulnerability in Cisco TelePresence Server Software

CVE-2017-3815 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

An API Privilege vulnerability in Cisco TelePresence Server Software could allow an unauthenticated, remote attacker to emulate Cisco TelePresence Server endpoints. Affected Products: This vulnerability affects Cisco TelePresence Server MSE 8710 Processors that are running a software release prior to Cisco TelePresence Software Release 4.3 and are running in locally managed mode. The vulnerable API was deprecated in Cisco TelePresence Software Release 4.3. More Information: CSCvc37616.

Learn more about our Cis Benchmark Audit For Cisco.