Cisco Expressway Software vulnerabilities

5 CVEs affecting Cisco Expressway Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-0653, published 2015-03-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-0653, published 2015-03-13. High severity, CVSS 10.0. EPSS: 4.3% chance of exploitation in the next 30 days. The management interface in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X7.2.4, X8 before X8.1.2, and X8.2 before X8.2.2 and Cisco TelePresence Conductor before…
CVE-2014-3368, published 2014-10-19. High severity, CVSS 7.8. EPSS: 3.9% chance of exploitation in the next 30 days. Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.2 allow remote attackers to cause a denial of service (device reload) via a high rate of crafted packets, aka Bug…
CVE-2014-3369, published 2014-10-19. High severity, CVSS 7.1. EPSS: 2.4% chance of exploitation in the next 30 days. The SIP IX implementation in Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 allows remote attackers to cause a denial of service (device reload) via crafted…
CVE-2014-3370, published 2014-10-19. High severity, CVSS 7.1. EPSS: 2.3% chance of exploitation in the next 30 days. Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 allow remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug IDs…
CVE-2015-0652, published 2015-03-13. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. The Session Description Protocol (SDP) implementation in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X8.2 and Cisco TelePresence Conductor before XC2.4 allows…