Skip to content
CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2024-20400

A vulnerability in the web-based management interface of Cisco Expressway Series could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

A vulnerability in the web-based management interface of Cisco Expressway Series could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this vulnerability by intercepting and modifying an HTTP request from a user. A successful exploit could allow the attacker to redirect the user to a malicious web page. Note: Cisco Expressway Series refers to Cisco Expressway Control (Expressway-C) devices and Cisco Expressway Edge (Expressway-E) devices.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco TelePresence Video Communication Server (VCS) Expressway

  • X8.5.1affected
  • X8.5.3affected
  • X8.5affected
  • X8.6.1affected
  • X8.6affected
  • X8.1.1affected
  • X8.1.2affected
  • X8.1affected
  • X8.2.1affected
  • X8.2.2affected
  • X8.2affected
  • X8.7.1affected
  • X8.7.2affected
  • X8.7.3affected
  • X8.7affected
  • X8.8.1affected
  • X8.8.2affected
  • X8.8.3affected
  • X8.8affected
  • X8.9.1affected
  • X8.9.2affected
  • X8.9affected
  • X8.10.0affected
  • X8.10.1affected
  • X8.10.2affected
  • X8.10.3affected
  • X8.10.4affected
  • X12.5.8affected
  • X12.5.9affected
  • X12.5.0affected
  • X12.5.2affected
  • X12.5.7affected
  • X12.5.3affected
  • X12.5.4affected
  • X12.5.5affected
  • X12.5.1affected
  • X12.5.6affected
  • X12.6.0affected
  • X12.6.1affected
  • X12.6.2affected
  • X12.6.3affected
  • X12.6.4affected
  • X12.7.0affected
  • X12.7.1affected
  • X8.11.1affected
  • X8.11.2affected
  • X8.11.4affected
  • X8.11.3affected
  • X8.11.0affected
  • X14.0.1affected
  • X14.0.3affected
  • X14.0.2affected
  • X14.0.4affected
  • X14.0.5affected
  • X14.0.6affected
  • X14.0.7affected
  • X14.0.8affected
  • X14.0.9affected
  • X14.0.10affected
  • X14.0.11affected
  • X14.2.1affected
  • X14.2.2affected
  • X14.2.5affected
  • X14.2.6affected
  • X14.2.0affected
  • X14.2.7affected
  • X14.3.0affected
  • X14.3.1affected
  • X14.3.2affected
  • X14.3.3affected
  • X14.3.4affected
  • X14.3.5affected
  • X15.0.0affected
  • X15.0.1affected

References