CVE-2019-1678: falha de média gravidade em Cisco Meeting Server
Cisco Meeting Server Denial of Service Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.3epss 1.4%
A vulnerability in Cisco Meeting Server could allow an authenticated, remote attacker to cause a partial denial of service (DoS) to Cisco Meetings application users who are paired with a Session Initiation Protocol (SIP) endpoint. The vulnerability is due to improper validation of coSpaces configuration parameters. An attacker could exploit this vulnerability by inserting crafted strings in specific coSpace parameters. An exploit could allow the attacker to prevent clients from joining a conference call in the affected coSpace. Versions prior to 2.4.3 are affected.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Produtos afetados
Cisco · Cisco Meeting ServerCVEs relacionadas — Cisco Meeting Server
No mesmo produto, das mais perigosas para as menos.
CVE-2018-15446MEDIUMCisco Meeting Server Information Disclosure VulnerabilityEPSS 2.2%CVE-2019-1676MEDIUMCisco Meeting Server SIP Processing Denial of Service VulnerabilityEPSS 1.8%CVE-2020-3160MEDIUMCisco Meeting Server Extensible Messaging and Presence Protocol Denial of Service VulnerabilityEPSS 1.2%CVE-2018-0439—Cisco Meeting Server Cross-Site Request Forgery VulnerabilityEPSS 1.2%CVE-2021-40122MEDIUMCisco Meeting Server Call Bridge Denial of Service VulnerabilityEPSS 1.2%CVE-2021-1524MEDIUMCisco Meeting Server API Denial of Service VulnerabilityEPSS 1.1%