CVE-2018-15449CWE-20

Cisco Video Surveillance Media Server Denial of Service Vulnerability

Medium · published November 8, 2018

CVSS v3.0
4.3
EPSS
2%
Percentile
77.6
In the wild
Unconfirmed
What it is

A vulnerability in the web-based management interface of Cisco Video Surveillance Media Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of the web-based management interface of an affected system. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected service. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link. A successful exploit could allow the attacker to cause the web-based management interface to become unreachable, resulting in a DoS condition.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01743 · 77.6th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2018-11-08T19:00Z
EPSS history
Timeline
  • 08 NOV 19:00Z
    Cisco Video Surveillance Media Server Denial of Service Vulnerability
    cvelistv5