A vulnerability in the web-based management interface of Cisco Expressway...

6.5 CVSS

Vulnerability Description

A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker with read-write privileges on the application to perform a command injection attack that could result in remote code execution on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to establish a remote shell with root privileges.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-20209

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-injection-X475EbTQ

More from Cisco

View All →

CVE-2025-20393

Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability

Critical 10

CVE-2025-20377

Cisco Unified Intelligence Center API Information Disclosure Vulnerability

Medium 4.3

CVE-2025-20376

Cisco Unified Contact Center Express Remote Code Execution Vulnerability

Medium 6.5

CVE-2025-20375

Cisco Unified Contact Center Express Arbitrary File Upload Vulnerability

Medium 6.5

CVE-2025-20374

Cisco Unified Contact Center Express Arbitrary File Download Vulnerability

Medium 4.9

Affected Vendor

Cisco

View all reports →

Affected Software

Cisco TelePresence Video Communication Server (VCS) Expressway

Vulnerable Versions:

X8.5.1, X8.5.3, X8.5, X8.6.1, X8.6, X8.1.1, X8.1.2, X8.1, X8.2.1, X8.2.2, X8.2, X8.7.1, X8.7.2, X8.7.3, X8.7, X8.8.1, X8.8.2, X8.8.3, X8.8, X8.9.1, X8.9.2, X8.9, X8.10.0, X8.10.1, X8.10.2, X8.10.3, X8.10.4, X12.5.8, X12.5.9, X12.5.0, X12.5.2, X12.5.7, X12.5.3, X12.5.4, X12.5.5, X12.5.1, X12.5.6, X12.6.0, X12.6.1, X12.6.2, X12.6.3, X12.6.4, X12.7.0, X12.7.1, X8.11.1, X8.11.2, X8.11.4, X8.11.3, X8.11.0, X14.0.1, X14.0.3, X14.0.2, X14.0.4, X14.0.5, X14.0.6, X14.0.7, X14.0.8, X14.0.9, X14.0.10, X14.0.11, X14.2.1, X14.2.2, X14.2.5, X14.2.6, X14.2.0, X14.2.7, X14.3.0