CVE-2018-15430

Name of the Vulnerable Software and Affected Versions Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) (affected versions not specified)

Description A vulnerability in the administrative web interface could allow an authenticated, remote attacker to execute code with user-level privileges on the underlying operating system. This issue is due to insufficient validation of the content of upgrade packages. An attacker could exploit this by uploading a malicious archive to the Upgrade page of the administrative web interface, potentially allowing the execution of code with user-level privileges on the underlying operating system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.