CVE-2009-4510: The SSH service on the TANDBERG Video Communication Server (VCS) before X5.1 uses a fixed DSA key, which ma...

Security readout for executives and security teams

TANDBERG Video Communication Server versions before X5.1 used the same SSH DSA key across systems. That weakens trust in SSH connections and can help a remote attacker impersonate a server or intercept traffic. The bundle does not provide CVSS, public exploitation evidence, or detailed affected-version inventory. Exposure is limited to TANDBERG Video Communication Server deployments running versions earlier than X5.1 with SSH reachable to administrators or management networks. The provided data does not identify CPEs or broader Cisco/TANDBERG product coverage. Treat as a targeted infrastructure hygiene issue, not an emergency without more evidence. Prioritize remediation if the affected VCS manages sensitive video communications or exposes SSH outside a restricted management network. Mitigation focus: Identify all TANDBERG VCS appliances and record software versions.; Upgrade affected VCS systems to X5.1 or later per TANDBERG guidance.; Restrict SSH access to trusted management networks only..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.