9.6 Critical

CVE-2023-20192 Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could…

Description

Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated attacker with Administrator-level read-only credentials to elevate their privileges to Administrator with read-write credentials on an affected system. Note: "Cisco Expressway Series" refers to Cisco Expressway Control (Expressway-C) devices and Cisco Expressway Edge (Expressway-E) devices. For more information about these vulnerabilities, see the Details section of this advisory.

Affected products and versions

Product	Affected versions	Fixed in
Cisco TelePresence Video Communication Server (VCS) Expressway	Versions not published

References

20230607 Cisco Expressway Series and Cisco TelePresence Video Communication Server Privilege Escalation Vulnerabilities sec.cloudapps.cisco.com

Timeline

Published June 28, 2023
Last modified August 2, 2024

The 33 CVEs of Cisco TelePresence Video Communication Server (VCS) Expressway →

CVE-2026-76497 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software… 6.6 Medium CVE-2026-76496 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software… 7.0 High CVE-2026-76495 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software… 7.8 High CVE-2026-76494 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software… 7.8 High

Track this CVE