CVE-2024-20252

Summary

CVE-2024-20252 is a serious vulnerability affecting Cisco Expressway Series (including Expressway-C and Expressway-E) and Cisco TelePresence Video Communication Server (VCS). An unauthenticated, remote attacker can exploit this issue to conduct Cross-Site Request Forgery (CSRF) attacks, which permit the execution of arbitrary actions on affected devices. These vulnerabilities pose a significant risk to system integrity and security, and further details can be found in the "#details" section of this advisory.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.