Overview

 

Multiple vulnerabilities exist in the API and in the web-based management interface of Cisco Expressway Series Software and Cisco TelePresence Video Communication Server (VCS) Software. They could allow a remote attacker to bypass certificate validation or conduct cross-site request forgery attacks on an affected device.

Full description of the vulnerability is available on the following link: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-csrf-sqpsSfY6

What do you need to do?

1.   Confirm your Cisco Expressway Series and Cisco TelePresence VCS Release version. If the version of your software is 14.0.9 or 14.2 or higher, no action is required.

2.   If the version of your Cisco Expressway Series and Cisco TelePresence VCS Release is 14.0 or lower, visit this page to download the latest software. 

3. If you haven't already done so, bookmark this website and register your details to receive email alerts.