CVE-2016-1387: The XML API in TelePresence Codec (TC) 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, and 7.3.5 and Colla...

Security readout for executives and security teams

Cisco TelePresence endpoints running listed TC or CE software versions may let a remote attacker use the XML API without proper authentication. Successful abuse could let an attacker run device control commands or change configuration, affecting conferencing availability, privacy, and operational integrity. Exposure is likely limited to organizations with affected Cisco TelePresence Codec or Collaboration Endpoint systems, especially where the XML API is reachable from untrusted or broadly accessible networks. Prioritize remediation for internet-exposed or broadly reachable conferencing endpoints. Even without confirmed exploitation, unauthenticated remote configuration or control of conferencing systems is a material operational and privacy risk. Mitigation focus: Inventory Cisco TelePresence TC and CE software versions.; Check Cisco advisory cisco-sa-20160504-tpxml for fixed software or vendor mitigations.; Restrict XML API access to trusted management networks..

Prepared

Jun 13, 2026, 14:44 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.