Deklan Evans

**Name of the Vulnerable Software and Affected Versions** Cisco TelePresence CE and RoomOS versions (affected versions not specified) **Description** The issue is related to improper access controls on files in the local file system, allowing an authenticated, local attacker to overwrite arbitrary files. An attacker could exploit this by placing a symbolic link in a specific location. A successful exploit could allow the attacker to overwrite arbitrary files. The attacker would need to have a remote support user account. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS (affected versions not specified) **Description** The issue is related to inadequate access control in the command-line interface (CLI) of the Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS, allowing an authenticated, local attacker to overwrite arbitrary files on the local system of an affected device. This is due to improper access controls on files in the local file system. An attacker could exploit this by placing a symbolic link in a specific location on the local file system, potentially allowing them to overwrite arbitrary files. **Recommendations** For Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS, consider restricting access to the CLI to minimize the risk of exploitation until a fix is available. As a temporary workaround, avoid using the CLI for sensitive operations on affected devices until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Expressway-C (affected versions not specified) Cisco TelePresence VCS (affected versions not specified) **Description** A vulnerability in the certificate validation of Cisco Expressway-C and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data. The vulnerability is due to a lack of validation of the SSL server certificate that an affected device receives when it establishes a connection to a Cisco Unified Communications Manager device. An attacker could exploit this vulnerability by using a man-in-the-middle technique to intercept the traffic between the devices, and then using a self-signed certificate to impersonate the endpoint. A successful exploit could allow the attacker to view the intercepted traffic in clear text or alter the contents of the traffic. **Recommendations** For Cisco Expressway-C, update to a version that includes the software update released by Cisco to address this vulnerability. For Cisco TelePresence VCS, update to a version that includes the software update released by Cisco to address this vulnerability. As a temporary workaround, consider restricting access to sensitive data and implementing additional security measures to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) (affected versions not specified) **Description** The issue is related to multiple vulnerabilities in the API and the web-based management interface of the affected devices. These vulnerabilities could allow a remote attacker to overwrite arbitrary files or conduct null byte poisoning attacks on an affected device. Additionally, there is a vulnerability related to errors in the certificate authentication procedure, which could allow a remote attacker to implement a man-in-the-middle attack. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.