Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.7

Cisco TelePresence Advanced Media Gateway can be forced offline

CVE-2019-15966 · published 7 years ago
Summary

The web interface of Cisco TelePresence Advanced Media Gateway does not properly check some input. A remote user who already has a login can send a specially crafted request that crashes the device, stopping its services. Apply the vendor’s update or restrict web access to trusted users to prevent this outage.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
cisco telepresence_advanced_media_gateway 1.1
cpe:2.3:a:cisco:telepresence_advanced_media_gateway:1.1:*:*:*:*:*:*:*
Original advisory text
A vulnerability in the web application of Cisco TelePresence Advanced Media Gateway could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device....
A vulnerability in the web application of Cisco TelePresence Advanced Media Gateway could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to the lack of input validation in the web application. An attacker could exploit this vulnerability by sending a crafted authenticated HTTP request to the device. An exploit could allow the attacker to stop services on an affected device. The device may become inoperable and results in a denial of service (DoS) condition.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
7.7 High
Exploitation
1% chance of attack within 30 days
Type
CWE-20Improper Input Validation
Timeline
Published5 Nov 2019
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2019-15966 · NVD
Track software like this
Free during beta