Cisco Telepresence Conductor vulnerabilities

4 CVEs affecting Cisco Telepresence Conductor, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-1679, published 2019-02-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-0653, published 2015-03-13. High severity, CVSS 10.0. EPSS: 4.3% chance of exploitation in the next 30 days. The management interface in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X7.2.4, X8 before X8.1.2, and X8.2 before X8.2.2 and Cisco TelePresence Conductor before…
CVE-2019-1679, published 2019-02-07. Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days. A vulnerability in the web interface of Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server (VCS) Software could allow an authenticated, remote…
CVE-2015-0652, published 2015-03-13. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. The Session Description Protocol (SDP) implementation in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X8.2 and Cisco TelePresence Conductor before XC2.4 allows…
CVE-2017-12287, published 2017-10-19. Medium severity, CVSS 4.3. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability in the cluster database (CDB) management component of Cisco Expressway Series Software and Cisco TelePresence Video Communication Server (VCS) Software could allow an authenticated,…