Vulnerabilities > CVE-2017-12362 - Unspecified vulnerability in Cisco Meeting Server

CVSS 7.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

COMPLETE

network

low complexity

cisco

NVD

Published: 2017-11-30

Updated: 2019-10-09

Summary

A vulnerability in Cisco Meeting Server versions prior to 2.2.2 could allow an authenticated, remote attacker to cause the system to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to video calls being made on systems with a particular configuration. An attacker could exploit this by knowing a valid URI that directs to a Cisco Meeting Server. An attacker could then make a video call and cause the system to reload. Cisco Bug IDs: CSCve65931.

Vulnerable Configurations

Part	Description	Count
Application	Cisco Cisco Meeting Server 1.7_Base Cisco Meeting Server 1.8.15 Cisco Meeting Server 1.8_Base Cisco Meeting Server 1.9.0 Cisco Meeting Server 1.9.2 Cisco Meeting Server 1.9_Base Cisco Meeting Server 2.0.0 Cisco Meeting Server 2.0.1 Cisco Meeting Server 2.0.2 Cisco Meeting Server 2.0.3 Cisco Meeting Server 2.0.4 Cisco Meeting Server 2.0.5 Cisco Meeting Server 2.0.6 Cisco Meeting Server 2.0.7 Cisco Meeting Server 2.0.8 Cisco Meeting Server 2.0.9 Cisco Meeting Server 2.0.10 Cisco Meeting Server 2.0.11 Cisco Meeting Server 2.0.12 Cisco Meeting Server 2.0.13 Cisco Meeting Server 2.0.14 Cisco Meeting Server 2.0.15 Cisco Meeting Server 2.0.16 Cisco Meeting Server 2.1.0 Cisco Meeting Server 2.1.1 Cisco Meeting Server 2.1.2 Cisco Meeting Server 2.1.3 Cisco Meeting Server 2.1.4 Cisco Meeting Server 2.1.5 Cisco Meeting Server 2.1.6 Cisco Meeting Server 2.1.7 Cisco Meeting Server 2.1.8 Cisco Meeting Server 2.1.9 Cisco Meeting Server 2.1.10 Cisco Meeting Server 2.1.11 Cisco Meeting Server 2.1.12 Cisco Meeting Server 2.2.0 Cisco Meeting Server 2.2.1	38

Summary

Vulnerable Configurations

References