Detections
Analytics

CVE-2015-4329

high

Description

The administrator web interface in Cisco TelePresence Video Communication Server (VCS) X8.5.2 allows remote authenticated users to execute arbitrary OS commands via crafted HTTP requests, aka Bug ID CSCuv11796.

References

http://www.securitytracker.com/id/1033329

http://www.securityfocus.com/bid/76395

http://tools.cisco.com/security/center/viewAlert.x?alertId=40523

Details

Source: Mitre, NVD

Published: 2015-08-20

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 6.5

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00464