Cisco vulnerabilities by product, model, software, and advisory.
Cisco TelePresence Server API Privilege Vulnerability
cisco-sa-20170315-tps · Medium · Published · Updated
A vulnerability in Cisco TelePresence Server Software could allow an unauthenticated, remote attacker to emulate Cisco TelePresence Server endpoints. The vulnerability is due to how session identification information is maintained by a specific API of the affected software. An attacker could exploit this vulnerability by snooping temporary, unencrypted keys on an affected system. A successful exploit could allow the attacker to emulate a Cisco TelePresence Server endpoint. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-tps