CVE-2024-20254
9.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Summary
Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to conduct cross-site request forgery (CSRF) attacks that perform arbitrary actions on an affected device. Note: "Cisco Expressway Series" refers to Cisco Expressway Control (Expressway-C) devices and Cisco Expressway Edge (Expressway-E) devices. For more information about these vulnerabilities, see the Details ["#details"] section of this advisory.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.5.1 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.5.3 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.5 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.6.1 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.6 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.1.1 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.1.2 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.1 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.2.1 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.2.2 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.2 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.7.1 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.7.2 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.7.3 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.7 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.8.1 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.8.2 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.8.3 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.8 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.9.1 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.9.2 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.9 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.10.0 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.10.1 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.10.2 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.10.3 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.10.4 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X12.5.8 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X12.5.9 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X12.5.0 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X12.5.2 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X12.5.7 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X12.5.3 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X12.5.4 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X12.5.5 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X12.5.1 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X12.5.6 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X12.6.0 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X12.6.1 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X12.6.2 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X12.6.3 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X12.6.4 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X12.7.0 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X12.7.1 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.11.1 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.11.2 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.11.4 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.11.3 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.11.0 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X14.0.1 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X14.0.3 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X14.0.2 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X14.0.4 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X14.0.5 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X14.0.6 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X14.0.7 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X14.0.8 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X14.0.9 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X14.0.10 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X14.0.11 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X14.2.1 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X14.2.2 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X14.2.5 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X14.2.6 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X14.2.0 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X14.2.7 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X14.3.0 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X14.3.1 | affected |
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X14.3.2 | affected |
Weaknesses
- CWE-352: Cross-Site Request Forgery (CSRF)
ADP Enrichment
CVE Program Container
Additional References
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: total
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.