Known vulnerabilities in TelePresence Video Communication Server (VCS)

Known vulnerabilities in TelePresence Video Communication Server (VCS)

Vendor: Cisco Systems, Inc

Software: TelePresence Video Communication Server (VCS)

Software CPE: cpe:2.3:a:cisco_systems:telepresence_video_communication_server_vcs:*:*:*:*:*:*:*:*

Website: https://www.cisco.com

Total vulnerabilities: 8

Public exploits: 2

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Vulnerabilities (8)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU79953 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-20209	CWE-78	Low	Available	No	14.3.1	24.08.2023	SB2023082436
#VU77084 - Permissions, Privileges, and Access Controls CVE-2023-20192	CWE-264	Low	No	No	14.3.0	08.06.2023	SB2023060807
#VU77083 - Unverified Password Change CVE-2023-20105	CWE-620	Medium	No	No	14.2.1	08.06.2023	SB2023060806
#VU67968 - Cross-Site Request Forgery (CSRF) CVE-2022-20853	CWE-352	Low	No	No	14.0.9	06.10.2022	SB2022100632
#VU67967 - Improper Certificate Validation CVE-2022-20814	CWE-295	Medium	No	No	14.2	06.10.2022	SB2022100631
#VU60967 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-20755	CWE-78	Medium	No	No	X14.0.5	02.03.2022	SB2022030223
#VU60966 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-20754	CWE-22	Medium	No	No	X14.0.5	02.03.2022	SB2022030223
#VU56678 - Server-Side Request Forgery (SSRF) CVE-2021-40438	CWE-918	High	Available	Exploited	X14.0.4, X14.1, X14.2	17.09.2021	SB2021091706 SB2021091707 SB2021092301 and 42 more