Back to CVE Browser

CVE-2015-4257

MEDIUM

6.8

CVSS Severity Score

EPSS Score0.0340%

EPSS Percentile24.11th

PublishedJul 10, 2015

Last ModifiedMay 6, 2026

Vulnerability Description

Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence MCU 4500 devices with software 4.5(1.55) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90710.

Affected Platforms (CPE)

📦

Cisco

Telepresence Mcu Software

= 4.5\(1.55\)

References & Advisories

🔗 http://tools.cisco.com/security/center/viewAlert.x?alertId=39801

🔗 http://www.securitytracker.com/id/1032838

🔗 http://tools.cisco.com/security/center/viewAlert.x?alertId=39801

🔗 http://www.securitytracker.com/id/1032838

Related Vulnerabilities

CVE-2017-37929.8

A vulnerability in a proprietary device driver in the kernel of Cisco TelePresence Multipoint Control Unit (MCU) Software could al...

CVE-2015-07139.0

The web framework in Cisco TelePresence Advanced Media Gateway Series Software before 1.1(1.40), Cisco TelePresence IP Gateway Ser...

CVE-2014-33977.8

The network stack in Cisco TelePresence MCU Software before 4.3(2.30) allows remote attackers to cause a denial of service (memory...

CVE-2015-06217.8

Cisco TelePresence MCU devices with software 4.5(1.45) allow remote attackers to cause a denial of service (device reload) via an ...