The administrative web interface in Cisco Hosted Collaboration Solution (HCS) 10.6(1) and earlier allows remote authenticated users to execute arbitrary commands via crafted input to unspecified fields, aka Bug ID CSCut02786.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0750
Reference (s):
- CISCO:20150522 Cisco HCS Administrative Web Interface Arbitrary Command Execution Vulnerability
- URL: http://tools.cisco.com/security/center/viewAlert.x?alertId=38969