Description
A local file script in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows local users to gain privileges for OS command execution via invalid parameters, aka Bug ID CSCuv10556.
References
- 1033442 vdb-entry
- 20150901 Cisco TelePresence Video Communication Server Expressway Command Injection Vulnerability vendor-advisory