« Volver al listado

CVE-2015-0653

Estado: ModificadaAlta (10)—

The management interface in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X7.2.4, X8 before X8.1.2, and X8.2 before X8.2.2 and Cisco TelePresence Conductor before X2.3.1 and XC2.4 before XC2.4.1 allows remote attackers to bypass authentication via crafted login parameters, aka Bug IDs CSCur02680 and CSCur05556.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Cisco — Expressway SoftwareCisco — Telepresence ConductorCisco — Telepresence Video Communication Server Software

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-0653",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-03-13T01:59:32.427",
  "references": [
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150311-vcs",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1031910",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150311-vcs",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1031910",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The management interface in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X7.2.4, X8 before X8.1.2, and X8.2 before X8.2.2 and Cisco TelePresence Conductor before X2.3.1 and XC2.4 before XC2.4.1 allows remote attackers to bypass authentication via crafted login parameters, aka Bug IDs CSCur02680 and CSCur05556."
    },
    {
      "lang": "es",
      "value": "La interfaz de gestión en Cisco TelePresence Video Communication Server (VCS) y Cisco Expressway anterior a X7.2.4, X8 anterior a X8.1.2, y X8.2 anterior a X8.2.2 y Cisco TelePresence Conductor anterior a X2.3.1 y XC2.4 anterior a XC2.4.1 permite a atacantes remotos evadir la autenticación a través de parámetros de inicio de sesión manipulados, también conocido como Bug IDs CSCur02680 y CSCur05556."
    }
  ],
  "lastModified": "2026-06-17T00:20:40.820",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:expressway_software:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "77EF82E8-2E13-42AF-B593-8E37D048429C",
              "versionEndExcluding": "x7.2.4",
              "versionStartIncluding": "x7.2"
            },
            {
              "criteria": "cpe:2.3:a:cisco:expressway_software:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1B629603-C53F-4766-8A41-C71241F68803",
              "versionEndExcluding": "x8.1.2",
              "versionStartIncluding": "x8.1"
            },
            {
              "criteria": "cpe:2.3:a:cisco:expressway_software:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A887E79B-F041-469F-9477-A5E4546882EC",
              "versionEndExcluding": "x8.2.2",
              "versionStartIncluding": "x8.2"
            },
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_conductor:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "10E2CE09-8C7D-4EA9-871A-5FC3F0D6563C",
              "versionEndExcluding": "x2.3.1",
              "versionStartIncluding": "x2.3"
            },
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_conductor:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F17C9CD1-9993-46D8-87D1-9D785B8C188F",
              "versionEndExcluding": "xc2.4.1",
              "versionStartIncluding": "xc2.4"
            },
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_video_communication_server_software:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8D5278EA-73AD-4D5C-AEDA-6BA8C59A45EE",
              "versionEndExcluding": "x7.2.4",
              "versionStartIncluding": "x7.2"
            },
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_video_communication_server_software:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "19CFA1F5-4BD0-4304-9012-F1B6A5D6D0C0",
              "versionEndExcluding": "x8.1.2",
              "versionStartIncluding": "x8.1"
            },
            {
              "criteria": "cpe:2.3:a:cisco:telepresence_video_communication_server_software:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F2068420-4E30-43DA-9ECD-F3568D35AE51",
              "versionEndExcluding": "x8.2.2",
              "versionStartIncluding": "x8.2"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}