CVE-2016-1444

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-07-07 · updated 2026-06-17
Weakness: CWE-20

Description

The Mobile and Remote Access (MRA) component in Cisco TelePresence Video Communication Server (VCS) X8.1 through X8.7 and Expressway X8.1 through X8.6 mishandles certificates, which allows remote attackers to bypass authentication via an arbitrary trusted certificate, aka Bug ID CSCuz64601.

Affected products

Cisco TelePresence Video Communication Server (VCS) Expressway: x8.1, x8.1.1, x8.1.2, x8.2, x8.2.1, x8.2.2 (+8)
Cisco Telepresence Video Communication Server Software: x8.5.1, x8.5.2, x8.5.3, x8.6

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160706-vcs
http://www.securityfocus.com/bid/91669
http://www.securitytracker.com/id/1036237
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160706-vcs
http://www.securityfocus.com/bid/91669
http://www.securitytracker.com/id/1036237

Get alerted when CVE-2016-1444 or the next vulnerability affects your stack