Vulnerabilities > CVE-2021-1311 - Improper Restriction of Excessive Authentication Attempts vulnerability in Cisco Webex Meetings and Webex Meetings Server

CVSS 5.4 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

LOW

network

low complexity

cisco

CWE-307

NVD

Published: 2021-01-13

Updated: 2024-04-11

Summary

A vulnerability in the reclaim host role feature of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an authenticated, remote attacker to take over the host role during a meeting. This vulnerability is due to a lack of protection against brute forcing of the host key. An attacker could exploit this vulnerability by sending crafted requests to a vulnerable Cisco Webex Meetings or Webex Meetings Server site. A successful exploit would require the attacker to have access to join a Webex meeting, including applicable meeting join links and passwords. A successful exploit could allow the attacker to acquire or take over the host role for a meeting.

Vulnerable Configurations

Part	Description	Count
Application	Cisco Cisco Webex Meetings Server 1.1_Base Cisco Webex Meetings Server 1.5.1.6 Cisco Webex Meetings Server 1.5_Base Cisco Webex Meetings Server 2.0.1.107 Cisco Webex Meetings Server 2.8.1.17 Cisco Webex Meetings Server 2.8.1.1023 Cisco Webex Meetings Server 3.0 Cisco Webex Meetings Server 4.0 Cisco Webex Meetings - Cisco Webex Meetings 1.3.5 Cisco Webex Meetings 2.0 Cisco Webex Meetings 8.0_Base Cisco Webex Meetings 8.6 Cisco Webex Meetings 9.0 Cisco Webex Meetings 9.0.1 Cisco Webex Meetings 9.1 Cisco Webex Meetings 9.1.1 Cisco Webex Meetings 9.1.2 Cisco Webex Meetings 9.1.3 Cisco Webex Meetings 9.5 Cisco Webex Meetings 9.5.0 Cisco Webex Meetings 9.5.1 Cisco Webex Meetings 9.5.2 Cisco Webex Meetings 9.6 Cisco Webex Meetings 9.6.0 Cisco Webex Meetings 9.6.1 Cisco Webex Meetings 9.7.0 Cisco Webex Meetings 9.8 Cisco Webex Meetings 9.8.0 Cisco Webex Meetings 9.8.1 Cisco Webex Meetings 9.8.2 Cisco Webex Meetings 9.9.0 Cisco Webex Meetings 9.10.0 Cisco Webex Meetings 9.12.0 Cisco Webex Meetings 9.13.0 Cisco Webex Meetings 9.14.0 Cisco Webex Meetings 9.15.0 Cisco Webex Meetings 9.15.1 Cisco Webex Meetings 10.0 Cisco Webex Meetings 10.0.0 Cisco Webex Meetings 10.1 Cisco Webex Meetings 10.1.0 Cisco Webex Meetings 10.2 Cisco Webex Meetings 10.2.0 Cisco Webex Meetings 10.2.1 Cisco Webex Meetings 10.3 Cisco Webex Meetings 10.3.0 Cisco Webex Meetings 10.4 Cisco Webex Meetings 10.4.0 Cisco Webex Meetings 10.4.1 Cisco Webex Meetings 10.5 Cisco Webex Meetings 10.5.0 Cisco Webex Meetings 10.6 Cisco Webex Meetings 10.6.0 Cisco Webex Meetings 10.7 Cisco Webex Meetings 10.7.0 Cisco Webex Meetings 11.0 Cisco Webex Meetings 11.0.0 Cisco Webex Meetings 11.1 Cisco Webex Meetings 11.1.0 Cisco Webex Meetings 11.2 Cisco Webex Meetings 11.2.0 Cisco Webex Meetings 11.3 Cisco Webex Meetings 11.3.0 Cisco Webex Meetings 11.4 Cisco Webex Meetings 11.4.0 Cisco Webex Meetings 11.5 Cisco Webex Meetings 11.5.0 Cisco Webex Meetings 11.6 Cisco Webex Meetings 11.6.0 Cisco Webex Meetings 11.7 Cisco Webex Meetings 11.7.0 Cisco Webex Meetings 11.7.0.236 Cisco Webex Meetings 33.6.6 Cisco Webex Meetings 39.1.0 Cisco Webex Meetings 39.2.0 Cisco Webex Meetings 39.3.0 Cisco Webex Meetings 39.4.0 Cisco Webex Meetings 39.4.1 Cisco Webex Meetings 39.5 Cisco Webex Meetings 39.5.0 Cisco Webex Meetings 39.5.11 Cisco Webex Meetings 39.5.12 Cisco Webex Meetings 39.5.17 Cisco Webex Meetings 39.5.18 Cisco Webex Meetings 39.5.25 Cisco Webex Meetings 39.5.26 Cisco Webex Meetings 39.6 Cisco Webex Meetings 39.6.0 Cisco Webex Meetings 39.7 Cisco Webex Meetings 39.7.0 Cisco Webex Meetings 39.7.1 Cisco Webex Meetings 39.7.4 Cisco Webex Meetings 39.7.7 Cisco Webex Meetings 39.8 Cisco Webex Meetings 39.8.0 Cisco Webex Meetings 39.8.2 Cisco Webex Meetings 39.8.3 Cisco Webex Meetings 39.8.4 Cisco Webex Meetings 39.9 Cisco Webex Meetings 39.9.0 Cisco Webex Meetings 39.9.1 Cisco Webex Meetings 39.10 Cisco Webex Meetings 39.10.0 Cisco Webex Meetings 39.11 Cisco Webex Meetings 39.11.0 Cisco Webex Meetings 40.1 Cisco Webex Meetings 40.1.0 Cisco Webex Meetings 40.1.8.5 Cisco Webex Meetings 40.2 Cisco Webex Meetings 40.2.0 Cisco Webex Meetings 40.2.1 Cisco Webex Meetings 40.2.2 Cisco Webex Meetings 40.2.3 Cisco Webex Meetings 40.2.4 Cisco Webex Meetings 40.4 Cisco Webex Meetings 40.4.0 Cisco Webex Meetings 40.4.1 Cisco Webex Meetings 40.4.10 Cisco Webex Meetings 40.6 Cisco Webex Meetings 40.6.0 Cisco Webex Meetings 40.6.1 Cisco Webex Meetings 40.6.2 Cisco Webex Meetings 40.6.6 Cisco Webex Meetings 40.6.9 Cisco Webex Meetings 40.6.11 Cisco Webex Meetings 40.7.0 Cisco Webex Meetings 40.7.1 Cisco Webex Meetings 40.8.0 Cisco Webex Meetings 40.8.1 Cisco Webex Meetings 40.8.2 Cisco Webex Meetings 40.8.9 Cisco Webex Meetings 40.9.0 Cisco Webex Meetings 40.10 Cisco Webex Meetings 40.10.0 Cisco Webex Meetings 40.10.2 Cisco Webex Meetings 40.11.0 Cisco Webex Meetings 40.11.1 Cisco Webex Meetings 40.11.3	159

Common Weakness Enumeration (CWE)

CWE-307 - Improper Restriction of Excessive Authentication Attempts

References

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-brutef-hostkey-FWRMxVF