CVE-2015-4256

Cisco TelePresence IP VCR 3.0(1.27) - Cross-Site Request Forgery

Title source: llm

Description

Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence IP VCR devices with software 3.0(1.27) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90736.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1032838

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/viewAlert.x?alertId=39800

Scores

EPSS 0.0100

EPSS Percentile 58.5%

Details

CWE

CWE-352

Status published

Products (1)

cisco/telepresence_ip_vcr_3.0 1.27

Published Jul 10, 2015

Tracked Since Feb 18, 2026