CVE-2016-9207

A vulnerability in the HTTP traffic server component of Cisco Expressway could allow an unauthenticated, remote attacker to initiate TCP connections to…

published December 14, 2016

CVSS
—
EPSS
2%
Percentile
80.7
In the wild
Unconfirmed
What it is

A vulnerability in the HTTP traffic server component of Cisco Expressway could allow an unauthenticated, remote attacker to initiate TCP connections to arbitrary hosts. This does not allow for full traffic proxy through the Expressway. Affected Products: This vulnerability affects Cisco Expressway Series Software and Cisco TelePresence Video Communication Server (VCS). More Information: CSCvc10834. Known Affected Releases: X8.7.2 X8.8.3. Known Fixed Releases: X8.9.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02019 · 80.7th percentile
Published
2016-12-14T00:37Z
EPSS history
Timeline
  • 14 DEC 00:37Z
    A vulnerability in the HTTP traffic server component of Cisco Expressway could allow an unauthenticated, remote attacker to initiate TCP connections to…
    cvelistv5