CVE-2015-4256: Cisco Telepresence IP Vcr 3.0

Medium severity, CVSS 6.8. EPSS: 1% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence IP VCR devices with software 3.0(1.27) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90736.

Affected products

• Cisco Telepresence IP Vcr 3.0: version 1.27 only

Published 2015-07-10. Last modified 2026-06-17.