CVE-2017-3815
MEDIUMCisco TelePresence Server <4.3 - Privilege Escalation
Title source: llmDescription
An API Privilege vulnerability in Cisco TelePresence Server Software could allow an unauthenticated, remote attacker to emulate Cisco TelePresence Server endpoints. Affected Products: This vulnerability affects Cisco TelePresence Server MSE 8710 Processors that are running a software release prior to Cisco TelePresence Software Release 4.3 and are running in locally managed mode. The vulnerable API was deprecated in Cisco TelePresence Software Release 4.3. More Information: CSCvc37616.
References (3)
Core 3
Core References
Vendor Advisory x_refsource_confirm
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-tps
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/96922
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1038035
Scores
CVSS v3
5.3
EPSS
0.0102
EPSS Percentile
58.8%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Details
CWE
CWE-319
Status
published
Products (4)
cisco/telepresence_server_software
4.2\(4.17\)
cisco/telepresence_server_software
4.2\(4.18\)
cisco/telepresence_server_software
4.2\(4.19\)
n/a/Cisco TelePresence Server
Cisco TelePresence Server
Published
Mar 17, 2017
Tracked Since
Feb 18, 2026