← Vulnerability feed

Vulnerability record · CVE-2023-20209 · published 16 August 2023

CVE-2023-20209: Cisco telepresence video communication server code injection vulnerability

Cisco · Telepresence Video Communication Server

A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker with read-write privileges on the application to perform a command injection attack that could result in remote code execution on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to establish a remote shell with root privileges.

7.2 CVSS 3.1 High EPSS 41% · top 1.4% CWE-94 · Code injectionCWE-77 · Command injection
7.2CVSS 3.1 base score
41%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker with read-write privileges on the application to perform a command injection attack that could result in remote code execution on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to establish a remote shell with root privileges.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-injection-X475EbTQ Vendor Advisory
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-injection-X475EbTQ Vendor Advisory

Track CVE-2023-20209 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2016-1468Cisco telepresence video communication server os command injection vulnerabilityThe administrative web interface in Cisco TelePresence Video Communication Server Expressway X8.5.2 allows remote authenticated users to execute arbi…EPSS 2.9%8.6CVE-2019-1845Cisco telepresence video communication server improper input validation vulnerabilityA vulnerability in the authentication service of the Cisco Unified Communications Manager IM and Presence (Unified CM IM&P) Service, Cisco TelePr…EPSS 4.6%8.6CVE-2017-3790Cisco expressway improper input validation vulnerabilityA vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) software could allow…EPSS 3.5%7.8CVE-2012-0330Cisco telepresence system software vulnerabilityCisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service (device crash) via a m…EPSS 1.3%7.7CVE-2023-20192Cisco telepresence video communication server improper input validation vulnerabilityMultiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated attacker wit…EPSS 0.66%7.5CVE-2020-3596Cisco expressway vulnerabilityA vulnerability in the Session Initiation Protocol (SIP) of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could all…EPSS 1.2%7.5CVE-2018-0409Cisco telepresence video communication server improper input validation vulnerabilityA vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service (CUCM IM&P) and the Cisco TelePresence Vi…EPSS 3.5%7.5CVE-2018-0358Cisco telepresence video communication server allocation without limits vulnerabilityA vulnerability in the file descriptor handling of Cisco TelePresence Video Communication Server (VCS) Expressway could allow an unauthenticated, rem…EPSS 2.4%

Source: NIST National Vulnerability Database (record CVE-2023-20209), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.