Home Cisco CVE-2023-20192
Back to Cisco

CVE-2023-20192

Cisco Expressway Series - Cisco TelePresence Video Communication Server (VCS)

Cisco CVSS 9.6 Updated March 18, 2026

Executive Risk Summary

"Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated attacker with Administrator-level read-only credentials to elevate their privileges to Administrator with read-write credentials on an affected system. This vulnerability poses a significant risk to the security and integrity of the affected systems, as it could allow attackers to gain elevated access and potentially disrupt or manipulate the system."

Operational Audit Arsenal

Target Type Firmware Image
Target Asset Cisco Expressway Series Firmware
Standard Path Global Firmware

Manual Verification Required

This is a non-Windows asset (Cisco). Use the target asset details and official path provided above to verify your current version against the official vendor advisories listed below.

Patch Impact Forecast

Reboot Required Likely

Potential service disruption during patch application

Internal Work Notes

CVE-2023-20192: Privilege Escalation Vulnerability in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) - Apply patch and verify version using CLI command 'show version' to ensure system is updated and secure.

Technical Intelligence & Operational Utilities • Delivered Weekly

Intelligence Sources

Related Cisco Threats

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.