https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 09:25:11 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-07665 bdu:2024-07665 https://cve.radiocsirt.org/vuln/bdu:2024-07665 https://cve.radiocsirt.org/vuln/cisco-sa-expressway-auth-kdfrcz2j <p>A vulnerability in Cisco Expressway Edge (Expressway-E) could allow an authenticated, remote attacker to masquerade as another user on an affected system. This vulnerability is due to inadequate authorization checks for Mobile and Remote Access (MRA) users. An attacker could exploit this vulnerability by running a series of crafted commands. A successful exploit could allow the attacker to intercept calls that are destined for a particular phone number or to make phone calls and have that phone number appear on the caller ID. To successfully exploit this vulnerability, the attacker must be an MRA user on an affected system. There are no workarounds that address this vulnerability.</p> <p>A vulnerability in Cisco Expressway Edge (Expressway-E) could allow an authenticated, remote attacker to masquerade as another user on an affected system. This vulnerability is due to inadequate authorization checks for Mobile and Remote Access (MRA) users. An attacker could exploit this vulnerability by running a series of crafted commands. A successful exploit could allow the attacker to intercept calls that are destined for a particular phone number or to make phone calls and have that phone number appear on the caller ID. To successfully exploit this vulnerability, the attacker must be an MRA user on an affected system. There are no workarounds that address this vulnerability.</p> https://cve.radiocsirt.org/vuln/cisco-sa-expressway-auth-kdfrcz2j https://cve.radiocsirt.org/vuln/cnvd-2024-39362 cnvd-2024-39362 https://cve.radiocsirt.org/vuln/cnvd-2024-39362 https://cve.radiocsirt.org/vuln/euvd-2026-161380 EUVD-2026-161380 https://cve.radiocsirt.org/vuln/euvd-2026-161380 https://cve.radiocsirt.org/vuln/fkie_cve-2024-20497 <p>A vulnerability in Cisco Expressway Edge (Expressway-E) could allow an authenticated, remote attacker to masquerade as another user on an affected system. This vulnerability is due to inadequate authorization checks for Mobile and Remote Access (MRA) users. An attacker could exploit this vulnerability by running a series of crafted commands. A successful exploit could allow the attacker to intercept calls that are destined for a particular phone number or to make phone calls and have that phone number appear on the caller ID. To successfully exploit this vulnerability, the attacker must be an MRA user on an affected system.</p> <p>A vulnerability in Cisco Expressway Edge (Expressway-E) could allow an authenticated, remote attacker to masquerade as another user on an affected system. This vulnerability is due to inadequate authorization checks for Mobile and Remote Access (MRA) users. An attacker could exploit this vulnerability by running a series of crafted commands. A successful exploit could allow the attacker to intercept calls that are destined for a particular phone number or to make phone calls and have that phone number appear on the caller ID. To successfully exploit this vulnerability, the attacker must be an MRA user on an affected system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-20497 https://cve.radiocsirt.org/vuln/ghsa-2vgj-5cmq-q6q3 <p>A vulnerability in Cisco Expressway Edge (Expressway-E) could allow an authenticated, remote attacker to masquerade as another user on an affected system.</p> <p>This vulnerability is due to inadequate authorization checks for Mobile and Remote Access (MRA) users. An attacker could exploit this vulnerability by running a series of crafted commands. A successful exploit could allow the attacker to intercept calls that are destined for a particular phone number or to make phone calls and have that phone number appear on the caller ID. To successfully exploit this vulnerability, the attacker must be an MRA user on an affected system.</p> <p>A vulnerability in Cisco Expressway Edge (Expressway-E) could allow an authenticated, remote attacker to masquerade as another user on an affected system.</p> <p>This vulnerability is due to inadequate authorization checks for Mobile and Remote Access (MRA) users. An attacker could exploit this vulnerability by running a series of crafted commands. A successful exploit could allow the attacker to intercept calls that are destined for a particular phone number or to make phone calls and have that phone number appear on the caller ID. To successfully exploit this vulnerability, the attacker must be an MRA user on an affected system.</p> https://cve.radiocsirt.org/vuln/ghsa-2vgj-5cmq-q6q3 https://cve.radiocsirt.org/vuln/gsd-2024-20497 gsd-2024-20497 https://cve.radiocsirt.org/vuln/gsd-2024-20497 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2062 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Cisco Expressway ausnutzen, um falsche Informationen darzustellen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Cisco Expressway ausnutzen, um falsche Informationen darzustellen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2062