Cisco Telepresence IP Vcr 3.0 vulnerabilities

2 CVEs affecting Cisco Telepresence IP Vcr 3.0, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-4256, published 2015-07-10.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-0713, published 2015-05-25. High severity, CVSS 9.0. EPSS: 2.9% chance of exploitation in the next 30 days. The web framework in Cisco TelePresence Advanced Media Gateway Series Software before 1.1(1.40), Cisco TelePresence IP Gateway Series Software, Cisco TelePresence IP VCR Series Software before…
• CVE-2015-4256, published 2015-07-10. Medium severity, CVSS 6.8. EPSS: 1% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence IP VCR devices with software 3.0(1.27) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID…