CVE-2024-20400: Cisco Telepresence Video Communication Server

Medium severity, CVSS 4.7. EPSS: 0.4% chance of exploitation in the next 30 days.

A vulnerability in the web-based management interface of Cisco Expressway Series could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this vulnerability by intercepting and modifying an HTTP request from a user. A successful exploit could allow the attacker to redirect the user to a malicious web page. Note: Cisco Expressway Series refers to Cisco Expressway Control (Expressway-C) devices and Cisco Expressway Edge (Expressway-E) devices.

Affected products

• Cisco Telepresence Video Communication Server: version x8.1 only; version x8.1.1 only; version x8.1.2 only; version x8.2 only; version x8.2.1 only; version x8.2.2 only; …

Published 2024-07-17. Last modified 2026-06-17.