CVE-2018-15430

A vulnerability in the administrative web interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to execute code with user-level privileges on the underlying operating system. The vulnerability is due to insufficient validation of the content of upgrade packages. An attacker could exploit this vulnerability by uploading a malicious archive to the Upgrade page of the administrative web interface. A successful exploit could allow the attacker to execute code with user-level privileges on the underlying operating system.

• CWE-20
• CWE-20

• http://www.securitytracker.com/id/1041784Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-express-vcs-rceVendor Advisory
• http://www.securitytracker.com/id/1041784Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-express-vcs-rceVendor Advisory

Published

Oct 5, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-15425A vulnerability in the web-based management interface of Cis…4.7
• CVE-2018-15426A vulnerability in the web-based interface of Cisco Unity Co…
• CVE-2018-15427A vulnerability in Cisco Video Surveillance Manager (VSM) So…
• CVE-2018-15428A vulnerability in the implementation of Border Gateway Prot…
• CVE-2018-15429A vulnerability in the web-based UI of Cisco HyperFlex HX Da…5.3
• CVE-2018-1543IBM WebSphere MQ 8.0 and 9.0 could allow a remote attacker t…5.9
• CVE-2018-15431A vulnerability in the Cisco Webex Network Recording Player …7.3
• CVE-2018-15432A vulnerability in the server backup function of Cisco Prime…
• CVE-2018-15433A vulnerability in the server backup function of Cisco Prime…
• CVE-2018-15434A vulnerability in the web-based management interface of Cis…
• CVE-2018-15435A vulnerability in the web-based management interface of Cis…6.1
• CVE-2018-15436A vulnerability in the web-based management interface of Cis…