Cisco admits holes and patches them

Cisco is advising customers to update their TelePresence system software and appliances following the release of a series of security fixes.

The company has issued four software updates designed to address vulnerabilities in various components of the videoconferencing platform.

According to Cisco’s advisories, the vulnerable components include the TelePresence Manager, Recording Server, Multipoint Switch and the TelePresence Immersive Endpoint System. If targeted, the components could be exploited for remote code execution operations.

Other possible risks include denial-of-service and the ability for an attacker to execute commands on the compromised system.

Cisco has released a series of security patches to address the flaws and administrators are being advised to make sure that all of their TelePresence products are fully up-to-date. The patches are being offered free by the company.