CVE-2009-4511: Vsecurity Tandberg Video Communication Server

Medium severity, CVSS 4.0. EPSS: 5.5% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in the web administration interface on the TANDBERG Video Communication Server (VCS) before X5.1 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the page parameter to (1) helppage.php or (2) user/helppage.php.

Affected products

• Vsecurity Tandberg Video Communication Server: up to and including x4.3.0; version x1.0.0 only; version x1.1.0 only; version x1.2.0 only; version x2.0.0 only; version x2.1.0 only; …

Published 2010-04-13. Last modified 2026-06-16.