CVE-2018-0439: falha em Cisco Meeting Server
Cisco Meeting Server Cross-Site Request Forgery Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 1.2%
A vulnerability in the web-based management interface of Cisco Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to follow a customized link. A successful exploit could allow the attacker to perform arbitrary actions on an affected device by using a web browser and with the privileges of the user.
Produtos afetados
Cisco · Cisco Meeting ServerCVEs relacionadas — Cisco Meeting Server
No mesmo produto, das mais perigosas para as menos.
CVE-2018-15446MEDIUMCisco Meeting Server Information Disclosure VulnerabilityEPSS 2.2%CVE-2019-1676MEDIUMCisco Meeting Server SIP Processing Denial of Service VulnerabilityEPSS 1.8%CVE-2019-1678MEDIUMCisco Meeting Server Denial of Service VulnerabilityEPSS 1.4%CVE-2020-3160MEDIUMCisco Meeting Server Extensible Messaging and Presence Protocol Denial of Service VulnerabilityEPSS 1.2%CVE-2021-40122MEDIUMCisco Meeting Server Call Bridge Denial of Service VulnerabilityEPSS 1.2%CVE-2021-1524MEDIUMCisco Meeting Server API Denial of Service VulnerabilityEPSS 1.1%