CVE-2017-3815

5.3 mediumEPSS 1.0%

Medium (5.3) in cisco telepresence server software. EPSS 1.0% chance of exploitation in the next 30 days.

An API Privilege vulnerability in Cisco TelePresence Server Software could allow an unauthenticated, remote attacker to emulate Cisco TelePresence Server endpoints. Affected Products: This vulnerability affects Cisco TelePresence Server MSE 8710 Processors that are running a software release prior to Cisco TelePresence Software Release 4.3 and are running in locally managed mode. The vulnerable API was deprecated in Cisco TelePresence Software Release 4.3. More Information: CSCvc37616.

Severity

CVSS 3.0

5.3 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
CWE: CWE-319
Published: 2017-03-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cisco:telepresence_server_software

References

http://www.securityfocus.com/bid/96922
http://www.securitytracker.com/id/1038035
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-tps
http://www.securityfocus.com/bid/96922
http://www.securitytracker.com/id/1038035

Check your stack JSON