Cisco slipped out four security advisories on Friday warning of serious vulnerabilities in its high-end videoconferencing system – or TelePresence, as it prefers to call it.
The flaws affect versions of Cisco TelePresence Manager, Recording Server, Immersive Endpoint System, and Multipoint Switch, and would variously allow an attacker to crash calls using malformed IP packets in a DDoS attack, perform a code injection attack via the web interface, and/or remote code execution and privilege escalation via the Cisco Discovery Protocol.
