A local file script in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows local users to gain privileges for OS command execution via invalid parameters, aka Bug ID CSCuv10556.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-4353
http://www.securitytracker.com/id/1033442
http://tools.cisco.com/security/center/viewAlert.x?alertId=40541