NVD

Id
17853  
Name
CVE-2016-1444  
Description
The Mobile and Remote Access (MRA) component in Cisco TelePresence Video Communication Server (VCS) X8.1 through X8.7 and Expressway X8.1 through X8.6 mishandles certificates, which allows remote attackers to bypass authentication via an arbitrary trusted certificate, aka Bug ID CSCuz64601.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-07-07  
Modified Date
2016-11-28  
Seq
2016-1444  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
97854 17853 CVE-2016-1444 20160706 Cisco Video Communication Server and Expressway Trusted Certificate Authentication Bypass Vulnerability  View
97855 17853 CVE-2016-1444 91669  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2738 JVNDB-2016-003511 Cisco TelePresence Video Communication Server および Expressway の Mobile and Remote Access コンポーネントにおける認証を回避される脆弱性 Cisco TelePresence Video Communication Server (VCS) および Expressway の Mobile and Remote Access (MRA) コンポーネントは、証明書を誤って処理するため、認証を回避される脆弱性が存在します。 CVE-2016-1444 87950 CVE-2016-1444 17853 5.8 6.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003511.html 2016-07-06 2016-07-12 View