#VU13406 Improper input validation in Cisco Meeting Server - CVE-2018-0371 

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU13406

#VU13406 Improper input validation in Cisco Meeting Server - CVE-2018-0371

Published: June 20, 2018 / Updated: June 21, 2018


Vulnerability identifier: #VU13406
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2018-0371
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
Cisco Meeting Server
Software vendor:
Cisco Systems, Inc

Description

The vulnerability allows a remote authenticated attacker to cause DoS condition on the target system.

The vulnerability exists in the Web Admin Interface of Cisco Meeting Server due to insufficient validation of incoming HTTP requests. A remote attacker can send a specially crafted HTTP request to the Web Admin Interface and cause the system to restart, terminating all ongoing calls.


Remediation

The vulnerability is addressed in the versions 2.2.13, 2.3.4.

External links