CVE-2015-6410

Cisco TelePresence Video Communication Server Software - Improper Input Validation

Title source: llm

Description

The Mobile and Remote Access (MRA) services implementation in Cisco Unified Communications Manager mishandles edge-device identity validation, which allows remote attackers to bypass intended call-reception and call-setup restrictions by spoofing a user, aka Bug ID CSCuu97283.

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1034377

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-ucm

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/78741

Scores

EPSS 0.0168

EPSS Percentile 74.2%

Details

CWE

CWE-20

Status published

Products (1)

cisco/telepresence_video_communication_server_software x8.5 rc4

Published Dec 14, 2015

Tracked Since Feb 18, 2026