Vulnerabilities > Cisco > Telepresence Video Communication Server Software > x8.5

DATE CVE VULNERABILITY TITLE RISK
2015-12-14 CVE-2015-6410 Improper Input Validation vulnerability in Cisco Telepresence Video Communication Server Software X8.5
The Mobile and Remote Access (MRA) services implementation in Cisco Unified Communications Manager mishandles edge-device identity validation, which allows remote attackers to bypass intended call-reception and call-setup restrictions by spoofing a user, aka Bug ID CSCuu97283.
network
low complexity
cisco CWE-20
4.0
2015-06-12 CVE-2015-0772 Resource Management Errors vulnerability in Cisco Telepresence Video Communication Server Software X8.5
Cisco TelePresence Video Communication Server (VCS) X8.5RC4 allows remote attackers to cause a denial of service (CPU consumption or device outage) via a crafted SDP parameter-negotiation request in an SDP session during a SIP connection, aka Bug ID CSCut42422.
network
cisco CWE-399
7.1