CVE-2011-2538: Cisco Telepresence Video Communication Server

High severity, CVSS 7.2. EPSS: 2.6% chance of exploitation in the next 30 days.

Cisco Video Communications Server (VCS) before X7.0.3 contains a command injection vulnerability which allows remote, authenticated attackers to execute arbitrary commands.

Affected products

• Cisco Telepresence Video Communication Server: before x7.0.3 (fixed in x7.0.3)

Published 2019-10-29. Last modified 2026-06-16.