The vulnerability is caused by insecure handling of temporary files within Cisco Expressway Series software, which can expose sensitive data or allow attackers to inject or tamper with files. This weakness aligns with CWE-377 and poses potential confidentiality, integrity, and availability risks when temporary files are not properly protected or cleaned.

Cisco TelePresence Video Communication Server (VCS) Expressway systems are affected. Specific product models are identified, but detailed version information is not provided in the advisory.

The CVSS score of 6.6 indicates a medium severity vulnerability. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. Because the description does not state a public exploitation vector, the attack vector is inferred to be local or requires privileged access to the affected system. The risk remains moderate, with uncertainty around how readily an adversary could exploit the temporary file weakness.