CVE-2019-1872: A vulnerability in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway Series software could allow an unauthenticated, remote attacker to…

PriorityP335medium5.3CVSS 3.0

AVNACLPRNUINSUCNILAN

EPSS

1.52%

71.9th percentile

A vulnerability in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway Series software could allow an unauthenticated, remote attacker to cause an affected system to send arbitrary network requests. The vulnerability is due to improper restrictions on network services in the affected software. An attacker could exploit this vulnerability by sending malicious requests to the affected system. A successful exploit could allow the attacker to send arbitrary network requests sourced from the affected system.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
cisco	cisco_telepresence_video_communication_server	>= unspecified < X12.5	X12.5
cisco	telepresence_video_communication_server	< x12.5	x12.5
cisco	telepresence_video_communication_server_and_cisco_expressway_series_server-side	—	—

CVSS provenance

nvdv3.05.3MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N

vendor_cisco5.3MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.