Cisco Expressway — known CVE vulnerabilities

Every CVE whose affected-product data names Cisco Expressway, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (14)

• CVE-2024-20254 — CVSS 9.6 (critical): Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated…
• CVE-2024-20252 — CVSS 9.6 (critical): Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated…
• CVE-2022-20813 — CVSS 9.0 (critical): Multiple vulnerabilities in the API and in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video…
• CVE-2022-20812 — CVSS 9.0 (critical): Multiple vulnerabilities in the API and in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video…
• CVE-2017-3790 — CVSS 8.6 (high): A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) software…
• CVE-2024-20255 — CVSS 8.2 (high): A vulnerability in the SOAP API of Cisco Expressway Series and Cisco TelePresence Video Communication Server could allow an…
• CVE-2023-44487 — CVSS 7.5 (high) — actively exploited: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly…
• CVE-2018-5390 — CVSS 7.5 (high): Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every…
• CVE-2021-34716 — CVSS 6.7 (medium): A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS)…
• CVE-2016-9207 — CVSS 6.5 (medium): A vulnerability in the HTTP traffic server component of Cisco Expressway could allow an unauthenticated, remote attacker to initiate TCP…
• CVE-2020-3482 — CVSS 6.5 (medium): A vulnerability in the Traversal Using Relays around NAT (TURN) server component of Cisco Expressway software could allow an…
• CVE-2020-3596 — CVSS 5.9 (medium): A vulnerability in the Session Initiation Protocol (SIP) of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS)…
• CVE-2021-34715 — CVSS 4.7 (medium): A vulnerability in the image verification function of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could…
• CVE-2017-12287 — CVSS 4.3 (medium): A vulnerability in the cluster database (CDB) management component of Cisco Expressway Series Software and Cisco TelePresence Video…