Cisco Meeting Server vulnerabilities

31 CVEs affecting Cisco Meeting Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-20255, published 2023-11-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-6448, published 2016-11-03. Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days. A vulnerability in the Session Description Protocol (SDP) parser of Cisco Meeting Server could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. This…
CVE-2018-0262, published 2018-05-02. High severity, CVSS 8.1. EPSS: 3.9% chance of exploitation in the next 30 days. A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to gain unauthorized access to components of, or sensitive information in, an affected system, leading to…
CVE-2018-0280, published 2018-05-17. High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days. A vulnerability in the Real-Time Transport Protocol (RTP) bitstream processing of the Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…
CVE-2017-12249, published 2017-09-13. Critical severity, CVSS 9.1. EPSS: 3.1% chance of exploitation in the next 30 days. A vulnerability in the Traversal Using Relay NAT (TURN) server included with Cisco Meeting Server (CMS) could allow an authenticated, remote attacker to gain unauthenticated or unauthorized access to…
CVE-2016-6447, published 2016-11-03. Critical severity, CVSS 9.8. EPSS: 3.1% chance of exploitation in the next 30 days. A vulnerability in Cisco Meeting Server and Meeting App could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. This vulnerability affects the following…
CVE-2018-0371, published 2018-06-21. Medium severity, CVSS 6.5. EPSS: 2.8% chance of exploitation in the next 30 days. A vulnerability in the Web Admin Interface of Cisco Meeting Server could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient…
CVE-2017-3830, published 2017-02-22. High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days. A vulnerability in an internal API of the Cisco Meeting Server (CMS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected appliance. More…
CVE-2016-6445, published 2016-10-27. Critical severity, CVSS 9.1. EPSS: 2.5% chance of exploitation in the next 30 days. A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of the Cisco Meeting Server (CMS) before 2.0.6 and Acano Server before 1.8.18 and 1.9.x before 1.9.6 could allow an…
CVE-2017-12362, published 2017-11-30. Medium severity, CVSS 6.5. EPSS: 2.3% chance of exploitation in the next 30 days. A vulnerability in Cisco Meeting Server versions prior to 2.2.2 could allow an authenticated, remote attacker to cause the system to reload, resulting in a denial of service (DoS) condition. The…
CVE-2017-6763, published 2017-08-07. High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days. A vulnerability in the implementation of the H.264 protocol in Cisco Meeting Server (CMS) 2.1.4 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an…

Latest

CVE-2023-20255, published 2023-11-01. Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to…
CVE-2021-40122, published 2021-10-21. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability in an API of the Call Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to…
CVE-2021-1524, published 2021-06-16. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability in the API of Cisco Meeting Server could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because…
CVE-2020-3197, published 2020-07-16. Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability in the API subsystem of Cisco Meetings App could allow an unauthenticated, remote attacker to retain and reuse the Traversal Using Relay NAT (TURN) server credentials that are…
CVE-2020-3160, published 2020-02-19. Medium severity, CVSS 5.3. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) feature of Cisco Meeting Server software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…
CVE-2019-1623, published 2019-06-20. Medium severity, CVSS 6.7. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the CLI configuration shell of Cisco Meeting Server could allow an authenticated, local attacker to inject arbitrary commands as the root user. The vulnerability is due to…
CVE-2019-1794, published 2019-04-18. Medium severity, CVSS 5.1. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the search path processing of Cisco Directory Connector could allow an authenticated, local attacker to load a binary of their choosing. The vulnerability is due to uncontrolled…
CVE-2019-1676, published 2019-02-08. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. A vulnerability in the Session Initiation Protocol (SIP) call processing of Cisco Meeting Server (CMS) software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…
CVE-2019-1678, published 2019-02-07. Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in Cisco Meeting Server could allow an authenticated, remote attacker to cause a partial denial of service (DoS) to Cisco Meetings application users who are paired with a Session…
CVE-2018-15446, published 2018-11-08. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper protections on data that is…