CVE-2019-1660

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Management Suite (TMS) software (affected versions not specified)

Description A vulnerability in the Simple Object Access Protocol (SOAP) of Cisco TelePresence Management Suite (TMS) software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The issue is due to a lack of proper access and authentication controls on the affected TMS software. An attacker could exploit this by sending crafted SOAP calls to the affected device, potentially allowing access to system management tools, which should normally be prohibited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.