← Vulnerability feed

Vulnerability record · CVE-2016-1400 · published 25 May 2016

CVE-2016-1400: Cisco telepresence video communication server improper input validation vulnerability

Cisco · Telepresence Video Communication Server

Cisco TelePresence Video Communications Server (VCS) X8.x before X8.7.2 allows remote attackers to cause a denial of service (service disruption) via a crafted URI in a SIP header, aka Bug ID CSCuy43258.

7.5 CVSS 3.0 High EPSS 1.8% · top 22.8% CWE-20 · Improper input validation
7.5CVSS 3.0 base score, v2 5.0
1.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

Cisco TelePresence Video Communications Server (VCS) X8.x before X8.7.2 allows remote attackers to cause a denial of service (service disruption) via a crafted URI in a SIP header, aka Bug ID CSCuy43258.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160516-vcs Vendor Advisory
http://www.securitytracker.com/id/1035899
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160516-vcs Vendor Advisory
http://www.securitytracker.com/id/1035899

Track CVE-2016-1400 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2016-1468Cisco telepresence video communication server os command injection vulnerabilityThe administrative web interface in Cisco TelePresence Video Communication Server Expressway X8.5.2 allows remote authenticated users to execute arbi…EPSS 2.9%8.6CVE-2019-1845Cisco telepresence video communication server improper input validation vulnerabilityA vulnerability in the authentication service of the Cisco Unified Communications Manager IM and Presence (Unified CM IM&P) Service, Cisco TelePr…EPSS 4.6%8.6CVE-2017-3790Cisco expressway improper input validation vulnerabilityA vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) software could allow…EPSS 3.5%7.8CVE-2012-0330Cisco telepresence system software vulnerabilityCisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service (device crash) via a m…EPSS 1.3%7.7CVE-2023-20192Cisco telepresence video communication server improper input validation vulnerabilityMultiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated attacker wit…EPSS 0.66%7.5CVE-2020-3596Cisco expressway vulnerabilityA vulnerability in the Session Initiation Protocol (SIP) of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could all…EPSS 1.2%7.5CVE-2018-0409Cisco telepresence video communication server improper input validation vulnerabilityA vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service (CUCM IM&P) and the Cisco TelePresence Vi…EPSS 3.5%7.5CVE-2018-0358Cisco telepresence video communication server allocation without limits vulnerabilityA vulnerability in the file descriptor handling of Cisco TelePresence Video Communication Server (VCS) Expressway could allow an unauthenticated, rem…EPSS 2.4%

Source: NIST National Vulnerability Database (record CVE-2016-1400), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.