← Vulnerability feed

Vulnerability record · CVE-2016-1468 · published 8 August 2016

CVE-2016-1468: Cisco telepresence video communication server os command injection vulnerability

Cisco · Telepresence Video Communication Server

The administrative web interface in Cisco TelePresence Video Communication Server Expressway X8.5.2 allows remote authenticated users to execute arbitrary commands via crafted fields, aka Bug ID CSCuv12531.

8.8 CVSS 3.0 High EPSS 2.9% · top 13.6% CWE-78 · OS command injection
8.8CVSS 3.0 base score, v2 6.5
2.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

The administrative web interface in Cisco TelePresence Video Communication Server Expressway X8.5.2 allows remote authenticated users to execute arbitrary commands via crafted fields, aka Bug ID CSCuv12531.

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160803-vcse Vendor Advisory
http://www.securityfocus.com/bid/92274
http://www.securitytracker.com/id/1036529
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160803-vcse Vendor Advisory
http://www.securityfocus.com/bid/92274
http://www.securitytracker.com/id/1036529

Track CVE-2016-1468 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.6CVE-2019-1845Cisco telepresence video communication server improper input validation vulnerabilityA vulnerability in the authentication service of the Cisco Unified Communications Manager IM and Presence (Unified CM IM&P) Service, Cisco TelePr…EPSS 4.6%8.6CVE-2017-3790Cisco expressway improper input validation vulnerabilityA vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) software could allow…EPSS 3.5%7.8CVE-2012-0330Cisco telepresence system software vulnerabilityCisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service (device crash) via a m…EPSS 1.3%7.7CVE-2023-20192Cisco telepresence video communication server improper input validation vulnerabilityMultiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated attacker wit…EPSS 0.66%7.5CVE-2020-3596Cisco expressway vulnerabilityA vulnerability in the Session Initiation Protocol (SIP) of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could all…EPSS 1.2%7.5CVE-2018-0409Cisco telepresence video communication server improper input validation vulnerabilityA vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service (CUCM IM&P) and the Cisco TelePresence Vi…EPSS 3.5%7.5CVE-2018-0358Cisco telepresence video communication server allocation without limits vulnerabilityA vulnerability in the file descriptor handling of Cisco TelePresence Video Communication Server (VCS) Expressway could allow an unauthenticated, rem…EPSS 2.4%7.5CVE-2016-1400Cisco telepresence video communication server improper input validation vulnerabilityCisco TelePresence Video Communications Server (VCS) X8.x before X8.7.2 allows remote attackers to cause a denial of service (service disruption) via…EPSS 1.8%

Source: NIST National Vulnerability Database (record CVE-2016-1468), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.