Cisco Fixed Critical CSRF Flaws in Expressway Gateways (CVE-2024-20252 and CVE-2024-20254)

Cisco patched multiple security vulnerabilities, including critical ones, in its Expressway Series gateways and TelePresence Video Communication Server (VCS). The vulnerabilities could enable an attacker to carry out arbitrary actions on affected devices.

Cisco Expressway Series (Expressway) is designed for comprehensive collaboration services, with established firewall-traversal technology, whereas Cisco TelePresence VCS is a product that streamlines telepresence conference control and session management. 

The company has announced that it will not be releasing security updates for the TelePresence VCS gateway, …

actions attacker cisco collaboration communication critical csrf cve devices enable expressway firewall flaws gateways security series server services technology telepresence telepresence video communication server video vulnerabilities