Cisco Telepresence IP Gateway vulnerabilities

2 CVEs affecting Cisco Telepresence IP Gateway, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-4255, published 2015-07-10.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-0713, published 2015-05-25. High severity, CVSS 9.0. EPSS: 2.9% chance of exploitation in the next 30 days. The web framework in Cisco TelePresence Advanced Media Gateway Series Software before 1.1(1.40), Cisco TelePresence IP Gateway Series Software, Cisco TelePresence IP VCR Series Software before…
• CVE-2015-4255, published 2015-07-10. Medium severity, CVSS 6.8. EPSS: 1% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence IP Gateway devices with software 2.0(3.34) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID…