CVE-2018-0371CWE-20

A vulnerability in the Web Admin Interface of Cisco Meeting Server could allow an authenticated, remote attacker to cause a denial of service (DoS) condition

published June 21, 2018

CVSS
—
EPSS
3%
Percentile
86.2
In the wild
Unconfirmed
What it is

A vulnerability in the Web Admin Interface of Cisco Meeting Server could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient validation of incoming HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the Web Admin Interface of an affected Cisco Meeting Server. A successful exploit could allow the attacker to restart the system, terminating all ongoing calls and resulting in a DoS condition on the affected product. This vulnerability affects the following releases of Cisco Meeting Server: Acano X-Series, Cisco Meeting Server 1000, Cisco Meeting Server 2000. Cisco Bug IDs: CSCvi48624.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02766 · 86.2th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2018-06-21T11:00Z
EPSS history
Timeline
  • 21 JUN 11:00Z
    A vulnerability in the Web Admin Interface of Cisco Meeting Server could allow an authenticated, remote attacker to cause a denial of service (DoS) condition
    cvelistv5