Vulnerabilities > Cisco > Telepresence Video Communication Server > x8.5

DATE CVE VULNERABILITY TITLE RISK
2016-07-07 CVE-2016-1444 Improper Input Validation vulnerability in Cisco products
The Mobile and Remote Access (MRA) component in Cisco TelePresence Video Communication Server (VCS) X8.1 through X8.7 and Expressway X8.1 through X8.6 mishandles certificates, which allows remote attackers to bypass authentication via an arbitrary trusted certificate, aka Bug ID CSCuz64601.
network
low complexity
cisco CWE-20
6.5
2016-05-25 CVE-2016-1400 Improper Input Validation vulnerability in Cisco Telepresence Video Communication Server
Cisco TelePresence Video Communications Server (VCS) X8.x before X8.7.2 allows remote attackers to cause a denial of service (service disruption) via a crafted URI in a SIP header, aka Bug ID CSCuy43258.
network
low complexity
cisco CWE-20
7.5