Cisco Ip Interoperability And Collaboration System vulnerabilities

CVE-2016-6397 [CRITICAL] CWE-287 CVE-2016-6397: A vulnerability in the interdevice communications interface of the Cisco IP Interoperability and Col A vulnerability in the interdevice communications interface of the Cisco IP Interoperability and Collaboration System (IPICS) Universal Media Services (UMS) could allow an unauthenticated, remote attacker to modify configuration parameters of the UMS and cause the system to become unavailable. Affected Products: This vulnerability affects Cisco IPIC

CVE-2016-6430 [HIGH] CWE-264 CVE-2016-6430: A vulnerability in the command-line interface of the Cisco IP Interoperability and Collaboration Sys A vulnerability in the command-line interface of the Cisco IP Interoperability and Collaboration System (IPICS) could allow an authenticated, local attacker to elevate the privilege level associated with their session. More Information: CSCva38636. Known Affected Releases: 4.10(1). Known Fixed Releases: 5.0(1).

CVE-2016-6429 [MEDIUM] CWE-79 CVE-2016-6429: A vulnerability in the web framework code of the Cisco IP Interoperability and Collaboration System A vulnerability in the web framework code of the Cisco IP Interoperability and Collaboration System (IPICS) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. More Information: CSCva47092. Known Affected Releases: 4.10(1).

CVE-2016-1375 [MEDIUM] CWE-79 CVE-2016-1375: Cross-site scripting (XSS) vulnerability in Cisco IP Interoperability and Collaboration System 4.10( Cross-site scripting (XSS) vulnerability in Cisco IP Interoperability and Collaboration System 4.10(1) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy12339.