CVE-2018-0371

MEDIUM 6.5CVE-2018-0371 · Published 21/06/2018 · updated 17/06/2026

In short

CVE-2018-0371 is a MEDIUM (CVSS 6.5) vulnerability affecting meeting server (cisco).
Chance of exploitation in the next 30 days (EPSS): 2.7%, higher than 86.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
meeting server cisco	`= 2.2.5`	No fix yet

Description

A vulnerability in the Web Admin Interface of Cisco Meeting Server could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient validation of incoming HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the Web Admin Interface of an affected Cisco Meeting Server. A successful exploit could allow the attacker to restart the system, terminating all ongoing calls and resulting in a DoS condition on the affected product. This vulnerability affects the following releases of Cisco Meeting Server: Acano X-Series, Cisco Meeting Server 1000, Cisco Meeting Server 2000. Cisco Bug IDs: CSCvi48624.

References

securityfocus.com/bid/104582 · Third Party Advisory
securitytracker.com/id/1041175 · Third Party Advisory
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-meeting-server-dos · Vendor Advisory

More vulnerabilities in meeting server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

meeting server

cisco

= 2.2.5

No fix yet

Description

More vulnerabilities in meeting server

See all →