CVE-2016-9207

Name of the Vulnerable Software and Affected Versions Cisco Expressway Series Software versions prior to X8.9 Cisco TelePresence Video Communication Server (VCS) versions prior to X8.9

Description A vulnerability in the HTTP traffic server component could allow an unauthenticated, remote attacker to initiate TCP connections to arbitrary hosts, although it does not allow for full traffic proxy through the Expressway.

Recommendations For Cisco Expressway Series Software version X8.7.2, update to version X8.9 or later. For Cisco Expressway Series Software version X8.8.3, update to version X8.9 or later. For Cisco TelePresence Video Communication Server (VCS) versions prior to X8.9, update to version X8.9 or later.