Vulnerabilities > CVE-2021-1311 - Improper Restriction of Excessive Authentication Attempts vulnerability in Cisco Webex Meetings Server

CVSS 5.4 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

LOW

network

low complexity

cisco

CWE-307

NVD

Published: 2021-01-13

Updated: 2024-11-21

Summary

A vulnerability in the reclaim host role feature of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an authenticated, remote attacker to take over the host role during a meeting. This vulnerability is due to a lack of protection against brute forcing of the host key. An attacker could exploit this vulnerability by sending crafted requests to a vulnerable Cisco Webex Meetings or Webex Meetings Server site. A successful exploit would require the attacker to have access to join a Webex meeting, including applicable meeting join links and passwords. A successful exploit could allow the attacker to acquire or take over the host role for a meeting.

Vulnerable Configurations

Part	Description	Count
Application	Cisco Cisco Webex Meetings Server - Cisco Webex Meetings Server 1.0 Cisco Webex Meetings Server 1.1 Cisco Webex Meetings Server 1.1_Base Cisco Webex Meetings Server 1.5 Cisco Webex Meetings Server 1.5\(.1.6\) Cisco Webex Meetings Server 1.5\(.1.131\) Cisco Webex Meetings Server 1.5.1.6 Cisco Webex Meetings Server 1.5.1.131 Cisco Webex Meetings Server 1.5_Base Cisco Webex Meetings Server 2.0 Cisco Webex Meetings Server 2.0.1.107 Cisco Webex Meetings Server 2.0_Base Cisco Webex Meetings Server 2.0_Mr2 Cisco Webex Meetings Server 2.0_Mr3 Cisco Webex Meetings Server 2.0_Mr4 Cisco Webex Meetings Server 2.0_Mr5 Cisco Webex Meetings Server 2.0_Mr6 Cisco Webex Meetings Server 2.0_Mr7 Cisco Webex Meetings Server 2.0_Mr8 Cisco Webex Meetings Server 2.0_Mr9 Cisco Webex Meetings Server 2.5 Cisco Webex Meetings Server 2.5\(1\) Cisco Webex Meetings Server 2.5.0.997 Cisco Webex Meetings Server 2.5.1.5 Cisco Webex Meetings Server 2.5.1.29 Cisco Webex Meetings Server 2.5_Base Cisco Webex Meetings Server 2.5_Mr1 Cisco Webex Meetings Server 2.5_Mr2 Cisco Webex Meetings Server 2.5_Mr3 Cisco Webex Meetings Server 2.5_Mr4 Cisco Webex Meetings Server 2.5_Mr5 Cisco Webex Meetings Server 2.5_Mr6 Cisco Webex Meetings Server 2.6 Cisco Webex Meetings Server 2.6.0 Cisco Webex Meetings Server 2.6.0.8 Cisco Webex Meetings Server 2.6.1.39 Cisco Webex Meetings Server 2.6_Base Cisco Webex Meetings Server 2.6_Mr1 Cisco Webex Meetings Server 2.6_Mr2 Cisco Webex Meetings Server 2.6_Mr3 Cisco Webex Meetings Server 2.7 Cisco Webex Meetings Server 2.7.0 Cisco Webex Meetings Server 2.7.1 Cisco Webex Meetings Server 2.7_Base Cisco Webex Meetings Server 2.7_Mr1 Cisco Webex Meetings Server 2.7_Mr2 Cisco Webex Meetings Server 2.8 Cisco Webex Meetings Server 2.8\(1\) Cisco Webex Meetings Server 2.8.1.17 Cisco Webex Meetings Server 2.8.1.1023 Cisco Webex Meetings Server 3.0 Cisco Webex Meetings Server 4.0 Cisco Webex Meetings - Cisco Webex Meetings 1.3.5 Cisco Webex Meetings 2.0 Cisco Webex Meetings 8.0_Base Cisco Webex Meetings 8.6 Cisco Webex Meetings 9.0 Cisco Webex Meetings 9.0.1 Cisco Webex Meetings 9.1 Cisco Webex Meetings 9.1.1 Cisco Webex Meetings 9.1.2 Cisco Webex Meetings 9.1.3 Cisco Webex Meetings 9.5 Cisco Webex Meetings 9.5.0 Cisco Webex Meetings 9.5.1 Cisco Webex Meetings 9.5.2 Cisco Webex Meetings 9.6 Cisco Webex Meetings 9.6.0 Cisco Webex Meetings 9.6.1 Cisco Webex Meetings 9.7.0 Cisco Webex Meetings 9.8 Cisco Webex Meetings 9.8.0 Cisco Webex Meetings 9.8.1 Cisco Webex Meetings 9.8.2 Cisco Webex Meetings 9.9.0 Cisco Webex Meetings 9.10.0 Cisco Webex Meetings 9.12.0 Cisco Webex Meetings 9.13.0 Cisco Webex Meetings 9.14.0 Cisco Webex Meetings 9.15.0 Cisco Webex Meetings 9.15.1 Cisco Webex Meetings 10.0 Cisco Webex Meetings 10.0.0 Cisco Webex Meetings 10.1 Cisco Webex Meetings 10.1.0 Cisco Webex Meetings 10.2 Cisco Webex Meetings 10.2.0 Cisco Webex Meetings 10.2.1 Cisco Webex Meetings 10.3 Cisco Webex Meetings 10.3.0 Cisco Webex Meetings 10.4 Cisco Webex Meetings 10.4.0 Cisco Webex Meetings 10.4.1 Cisco Webex Meetings 10.5 Cisco Webex Meetings 10.5.0 Cisco Webex Meetings 10.6 Cisco Webex Meetings 10.6.0 Cisco Webex Meetings 10.7 Cisco Webex Meetings 10.7.0 Cisco Webex Meetings 11.0 Cisco Webex Meetings 11.0.0 Cisco Webex Meetings 11.1 Cisco Webex Meetings 11.1.0 Cisco Webex Meetings 11.2 Cisco Webex Meetings 11.2.0 Cisco Webex Meetings 11.3 Cisco Webex Meetings 11.3.0 Cisco Webex Meetings 11.4 Cisco Webex Meetings 11.4.0 Cisco Webex Meetings 11.5 Cisco Webex Meetings 11.5.0 Cisco Webex Meetings 11.6 Cisco Webex Meetings 11.6.0 Cisco Webex Meetings 11.7 Cisco Webex Meetings 11.7.0 Cisco Webex Meetings 11.7.0.236 Cisco Webex Meetings 33.6.6 Cisco Webex Meetings 39.1.0 Cisco Webex Meetings 39.2.0 Cisco Webex Meetings 39.3.0 Cisco Webex Meetings 39.4.0 Cisco Webex Meetings 39.4.1 Cisco Webex Meetings 39.5 Cisco Webex Meetings 39.5.0 Cisco Webex Meetings 39.5.11 Cisco Webex Meetings 39.5.12 Cisco Webex Meetings 39.5.17 Cisco Webex Meetings 39.5.18 Cisco Webex Meetings 39.5.25 Cisco Webex Meetings 39.5.26 Cisco Webex Meetings 39.6 Cisco Webex Meetings 39.6.0 Cisco Webex Meetings 39.7 Cisco Webex Meetings 39.7.0 Cisco Webex Meetings 39.7.1 Cisco Webex Meetings 39.7.4 Cisco Webex Meetings 39.7.7 Cisco Webex Meetings 39.8 Cisco Webex Meetings 39.8.0 Cisco Webex Meetings 39.8.2 Cisco Webex Meetings 39.8.3 Cisco Webex Meetings 39.8.4 Cisco Webex Meetings 39.9 Cisco Webex Meetings 39.9.0 Cisco Webex Meetings 39.9.1 Cisco Webex Meetings 39.10 Cisco Webex Meetings 39.10.0 Cisco Webex Meetings 39.11 Cisco Webex Meetings 39.11.0 Cisco Webex Meetings 40.1 Cisco Webex Meetings 40.1.0 Cisco Webex Meetings 40.1.8.5 Cisco Webex Meetings 40.2 Cisco Webex Meetings 40.2.0 Cisco Webex Meetings 40.2.1 Cisco Webex Meetings 40.2.2 Cisco Webex Meetings 40.2.3 Cisco Webex Meetings 40.2.4 Cisco Webex Meetings 40.4 Cisco Webex Meetings 40.4.0 Cisco Webex Meetings 40.4.1 Cisco Webex Meetings 40.4.10 Cisco Webex Meetings 40.6 Cisco Webex Meetings 40.6.0 Cisco Webex Meetings 40.6.1 Cisco Webex Meetings 40.6.2 Cisco Webex Meetings 40.6.6 Cisco Webex Meetings 40.6.9 Cisco Webex Meetings 40.6.11 Cisco Webex Meetings 40.7.0 Cisco Webex Meetings 40.7.1 Cisco Webex Meetings 40.8.0 Cisco Webex Meetings 40.8.1 Cisco Webex Meetings 40.8.2 Cisco Webex Meetings 40.8.9 Cisco Webex Meetings 40.9.0 Cisco Webex Meetings 40.10 Cisco Webex Meetings 40.10.0 Cisco Webex Meetings 40.10.2 Cisco Webex Meetings 40.11.0 Cisco Webex Meetings 40.11.1 Cisco Webex Meetings 40.11.3	229

Common Weakness Enumeration (CWE)

CWE-307 - Improper Restriction of Excessive Authentication Attempts

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References