9.6
Critical
CVE-2024-20254 Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could…
Description
Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to conduct cross-site request forgery (CSRF) attacks that perform arbitrary actions on an affected device. Note: "Cisco Expressway Series" refers to Cisco Expressway Control (Expressway-C) devices and Cisco Expressway Edge (Expressway-E) devices. For more information about these vulnerabilities, see the Details ["#details"] section of this advisory.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco TelePresence Video Communication Server (VCS) Expressway | Versions not published | |
| cisco_tele_presence_video_communication_serve\/vcs\/_expressway | Versions not published |
References
- cisco-sa-expressway-csrf-KnnZDMj3 sec.cloudapps.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco TelePresence Video Communication Server (VCS) Expressway
The 33 CVEs of Cisco TelePresence Video Communication Server (VCS) Expressway →
CVE-2026-76497
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software…
6.6
Medium
CVE-2026-76496
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software…
7.0
High
CVE-2026-76495
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software…
7.8
High
CVE-2026-76494
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software…
7.8
High