Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2019-1722— Cisco Expressway Series and Cisco TelePresence Video Communication Server Cross-Site Request Forgery Vulnerability

EPSS 0.12% · P30
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2019-1722

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Cisco Expressway Series and Cisco TelePresence Video Communication Server Cross-Site Request Forgery Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability in the FindMe feature of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected system. The vulnerability is due to insufficient CSRF protections for the web-based management interface of the affected system. An attacker could exploit this vulnerability by persuading a user of the interface to follow a maliciously crafted link. A successful exploit could allow the attacker to perform arbitrary actions on an affected system with the privileges of the user. The arbitrary actions include adding an attacker-controlled device and redirecting calls intended for a specific user. For more information about CSRF attacks and potential mitigations, see Understanding Cross-Site Request Forgery Threat Vectors. This vulnerability is fixed in software version X12.5.1 and later.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
跨站请求伪造(CSRF)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco Expressway Series和Cisco TelePresence Video Communication Server 跨站请求伪造漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Expressway Series和Cisco TelePresence Video Communication Server（VCS）都是美国思科（Cisco）公司的产品。Cisco Expressway Series是一款用于统一通信的高级协作网关。Cisco TelePresence Video Communication Server是一款视频通信服务器。 Cisco Expressway Series和Cisco TelePresence VCS中的FindMe功能存在跨站请求伪造漏
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
CiscoCisco TelePresence Video Communication Server (VCS) unspecified ~ X12.5.1 -

II. Public POCs for CVE-2019-1722

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2019-1722

请登录查看更多情报信息。

Same Patch Batch · Cisco · 2019-04-18 · 23 CVEs total

CVE-2019-1797Cisco Wireless LAN Controller Software Cross-Site Request Forgery Vulnerability
CVE-2019-1719Cisco Identity Services Engine Cross-Site Scripting Vulnerability
CVE-2019-1721Cisco Expressway Series and Cisco TelePresence Video Communication Server Denial of Servic
CVE-2019-1720Cisco Expressway Series and Cisco TelePresence Video Communication Server Denial of Servic
CVE-2019-1777Cisco Registered Envelope Service Stored Cross-Site Scripting Vulnerability
CVE-2019-1725Cisco UCS B-Series Blade Servers Local Management CLI Arbitrary File Creation or CLI Param
CVE-2019-1792Cisco Umbrella Cross-Site Scripting Vulnerability
CVE-2019-1794Cisco Directory Connector Search Order Hijacking Vulnerability
CVE-2019-1799Cisco Wireless LAN Controller Software IAPP Message Handling Denial of Service Vulnerabili
CVE-2019-1796Cisco Wireless LAN Controller Software IAPP Message Handling Denial of Service Vulnerabili
CVE-2019-1800Cisco Wireless LAN Controller Software IAPP Message Handling Denial of Service Vulnerabili
CVE-2019-1841Cisco DNA Center Unintended Proxy Via SWIM Import Interface Vulnerability
CVE-2019-1805Cisco Wireless LAN Controller Secure Shell Unauthorized Access Vulnerability
CVE-2019-1802Cisco Firepower Management Center Persistent Cross-Site Scripting Vulnerability
CVE-2019-1830Cisco Wireless LAN Controller Locally Significant Certificate Denial of Service Vulnerabil
CVE-2019-1829Cisco Aironet Series Access Points Command Injection Vulnerability
CVE-2019-1826Cisco Aironet Series Access Points Quality of Service Denial of Service Vulnerability
CVE-2019-1835Cisco Aironet Series Access Points Directory Traversal Vulnerability
CVE-2019-1834Cisco Aironet Series Access Points Denial of Service Vulnerability
CVE-2019-1831Cisco Email Security Appliance Content Filter Bypass Vulnerability

Showing top 20 of 23 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Cisco TelePresence Video Communication Server (VCS)
Same vendor: Cisco
Same weakness: CWE-352

V. Comments for CVE-2019-1722

No comments yet

Leave a comment