CVE-2017-3815

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Server versions prior to 4.3

Description The issue is related to insufficient access control in the Cisco TelePresence Server software, which could allow a remote attacker to emulate server endpoints. This could potentially be exploited by an unauthenticated, remote attacker.

Recommendations For versions prior to 4.3, update to Cisco TelePresence Software Release 4.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable API until a patch is available.