CVE-2021-34715— Cisco Expressway Series和Cisco TelePresence Video Communication Server 数据伪造问题漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2021-34715の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Cisco Expressway Series and TelePresence Video Communication Server Image Verification Vulnerability
ソース: NVD (National Vulnerability Database)
脆弱性説明
A vulnerability in the image verification function of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to execute code with internal user privileges on the underlying operating system. The vulnerability is due to insufficient validation of the content of upgrade packages. An attacker could exploit this vulnerability by uploading a malicious archive to the Upgrade page of the administrative web interface. A successful exploit could allow the attacker to execute code with user-level privileges (the _nobody account) on the underlying operating system.
ソース: NVD (National Vulnerability Database)
CVSS情報
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
密码学签名的验证不恰当
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Cisco Expressway Series和Cisco TelePresence Video Communication Server 数据伪造问题漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Cisco Expressway Series和Cisco TelePresence Video Communication Server（VCS）都是美国思科（Cisco）公司的产品。Cisco Expressway Series是一款用于防火墙外访问设备的软件。该软件为防火墙外的用户提供了简单、高度安全的访问功能，帮助远程办公人员在他们选择的设备上更有效地工作。Cisco TelePresence Video Communication Server是一款视频通信服务器。 Cisco Expressw
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | n/a | - |
II. CVE-2021-34715の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2021-34715のインテリジェンス情報
请登录查看更多情报信息。
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewver-c6WZPXRxvendor-advisoryx_refsource_CISCO
- https://nvd.nist.gov/vuln/detail/CVE-2021-34715
Same Patch Batch · Cisco · 2021-08-18 · 7 CVEs total
| CVE-2021-34730 | 9.8 CRITICAL | Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution an |
| CVE-2021-34745 | 7.8 HIGH | AppDynamics .NET Agent Privilege Escalation Vulnerability |
| CVE-2021-34716 | 6.7 MEDIUM | Cisco Expressway Series and TelePresence Video Communication Server Remote Code Execution |
| CVE-2021-34734 | 6.5 MEDIUM | Cisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery Protocol Double-Free |
| CVE-2021-34749 | 5.8 MEDIUM | Multiple Cisco Products Server Name Identification Data Exfiltration Vulnerability |
| CVE-2021-1561 | 5.4 MEDIUM | Cisco Secure Email and Web Manager Spam Quarantine Unauthorized Access Vulnerability |
IV. 関連脆弱性
- CVE-2025-20179
Cisco Expressway Series Cross-Site Scripting Vulnerability - CVE-2022-20814
Cisco Expressway Series and Cisco TelePresence VCS Improper - CVE-2022-20853
Cisco Expressway Series and Cisco TelePresence VCS Cross-Sit - CVE-2024-20492
Cisco Expressway Series Privilege Escalation Vulnerability - CVE-2024-20497
Cisco Expressway Edge Improper Authorization Vulnerability
同じベンダー: Cisco
- CVE-2026-20219
Cisco Slido 安全漏洞 - CVE-2026-20034
Cisco Unity Connection Remote Code Execution Vulnerability - CVE-2026-20035
Cisco Unity Connection Server-Side Request Forgery Vulnerabi - CVE-2026-20167
Cisco IoT Field Network Director Remote Device Denial of Ser - CVE-2026-20169
Cisco IoT Field Network Director Command Injection Vulnerabi
同じ弱点: CWE-347
- CVE-2026-42193
Plunk: SNS webhook forgery - CVE-2026-44497
ZEBRA: Consensus Divergence in Transparent Sighash Hash-Type - CVE-2026-41669
Admidio: SAML Signature Validation Result Ignored — Forged A - CVE-2026-7689
Dolibarr ERP CRM Online Signature security.lib.php dol_verif - CVE-2026-33467
Improper Verification of Cryptographic Signature in Elastic
V. CVE-2021-34715へのコメント
まだコメントはありません