CVE-2021-1524: fallo de gravedad media en Cisco Meeting Server
Cisco Meeting Server API Denial of Service Vulnerability
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 4.3epss 1.1%
A vulnerability in the API of Cisco Meeting Server could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because requests that are sent to the API are not properly validated. An attacker could exploit this vulnerability by sending a malicious request to the API. A successful exploit could allow the attacker to cause all participants on a call to be disconnected, resulting in a DoS condition.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Productos afectados
Cisco · Cisco Meeting ServerCVEs relacionadas — Cisco Meeting Server
En el mismo producto, de las más peligrosas a las menos.
CVE-2018-15446MEDIUMCisco Meeting Server Information Disclosure VulnerabilityEPSS 2.2%CVE-2019-1676MEDIUMCisco Meeting Server SIP Processing Denial of Service VulnerabilityEPSS 1.8%CVE-2019-1678MEDIUMCisco Meeting Server Denial of Service VulnerabilityEPSS 1.4%CVE-2020-3160MEDIUMCisco Meeting Server Extensible Messaging and Presence Protocol Denial of Service VulnerabilityEPSS 1.2%CVE-2018-0439—Cisco Meeting Server Cross-Site Request Forgery VulnerabilityEPSS 1.2%CVE-2021-40122MEDIUMCisco Meeting Server Call Bridge Denial of Service VulnerabilityEPSS 1.2%