6.7
Medium
CVE-2019-1623 A vulnerability in the CLI configuration shell of Cisco Meeting Server could allow an authenticated, local attacker to…
Description
A vulnerability in the CLI configuration shell of Cisco Meeting Server could allow an authenticated, local attacker to inject arbitrary commands as the root user. The vulnerability is due to insufficient input validation during the execution of a vulnerable CLI command. An attacker with administrator-level credentials could exploit this vulnerability by injecting crafted arguments during command execution. A successful exploit could allow the attacker to perform arbitrary code execution as root on an affected product.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Meeting Server 2.2 | earliest → < 2.2.14 | 2.2.14 |
References
- 20190619 Cisco Meeting Server CLI Command Injection Vulnerability tools.cisco.com
- 108840 www.securityfocus.com
Timeline
- Published
- Last modified
Other CVEs of Cisco Meeting Server
The 9 CVEs of Cisco Meeting Server →
CVE-2023-20255
A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote…
5.3
Medium
CVE-2021-40122
A vulnerability in an API of the Call Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote…
5.9
Medium
CVE-2021-1524
A vulnerability in the API of Cisco Meeting Server could allow an authenticated, remote attacker to cause a denial of…
4.3
Medium
CVE-2020-3160
A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) feature of Cisco Meeting Server software…
5.3
Medium