CVE-2015-6414
Cisco TelePresence Video Communication Server X8.6 - Exposure of Sensitive Information via Shared Encryption Key
Title source: llmDescription
Cisco TelePresence Video Communication Server (VCS) X8.6 uses the same encryption key across different customers' installations, which makes it easier for local users to defeat cryptographic protection mechanisms by leveraging knowledge of a key from another installation, aka Bug ID CSCuw64516.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/79065
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1034429
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151210-tvcs
Scores
EPSS
0.0023
EPSS Percentile
14.1%
Details
CWE
CWE-200
Status
published
Products (1)
cisco/telepresence_video_communication_server_software
x8.6
Published
Dec 13, 2015
Tracked Since
Feb 18, 2026