CVE-2020-3160CWE-20

Cisco Meeting Server Extensible Messaging and Presence Protocol Denial of Service Vulnerability

Medium · published February 19, 2020

CVSS v3.0
5.3
EPSS
1%
Percentile
69.0
In the wild
Unconfirmed
What it is

A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) feature of Cisco Meeting Server software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition for users of XMPP conferencing applications. Other applications and processes are unaffected. The vulnerability is due to improper input validation of XMPP packets. An attacker could exploit this vulnerability by sending crafted XMPP packets to an affected device. An exploit could allow the attacker to cause process crashes and a DoS condition for XMPP conferencing applications.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01244 · 69.0th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2020-02-19T19:15Z
EPSS history
Timeline
  • 19 FEB 19:15Z
    Cisco Meeting Server Extensible Messaging and Presence Protocol Denial of Service Vulnerability
    cvelistv5