Skip to content
fr Sign in
5.3 Medium

CVE-2023-20255 A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote…

Description

A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP packets to an affected device. A successful exploit could allow the attacker to cause a partial availability condition, which could cause ongoing video calls to be dropped due to the invalid packets reaching the Web Bridge.

Affected products and versions

Product Affected versions Fixed in
Cisco Meeting Server Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Meeting Server

The 9 CVEs of Cisco Meeting Server →
CVE-2021-40122 A vulnerability in an API of the Call Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote… 5.9 Medium CVE-2021-1524 A vulnerability in the API of Cisco Meeting Server could allow an authenticated, remote attacker to cause a denial of… 4.3 Medium CVE-2020-3160 A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) feature of Cisco Meeting Server software… 5.3 Medium CVE-2019-1623 A vulnerability in the CLI configuration shell of Cisco Meeting Server could allow an authenticated, local attacker to… 6.7 Medium
Track this CVE