Description
Cisco TelePresence Video Communication Server (VCS) X7.0.3 does not properly process certain search rules, which allows remote attackers to create conferences via an unspecified Conductor request, aka Bug ID CSCub67989.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-5444
Scores
EPSS
0.0105
EPSS Percentile
60.6%
Details
CWE
CWE-264
Status
published
Products (1)
cisco/telepresence_video_communication_servers_software
x7.0.3
Published
Jan 17, 2013
Tracked Since
Feb 18, 2026