CVE-2017-12264
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A vulnerability in the Web Admin Interface of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient bound checks performed by the affected software. An attacker could exploit this vulnerability by sending a malicious HTTP packet to the affected system. A successful exploit could allow the attacker to cause a reload of the Web Admin Server. Cisco Bug IDs: CSCve89149.
Una vulnerabilidad en la interfaz de administrador web de Cisco Meeting Server podría permitir que un atacante remoto sin autenticar provoque una denegación de servicio (DoS). Esta vulnerabilidad también se debe a la insuficiente comprobación de límites por parte del software afectado. Un atacante podría explotar esta vulnerabilidad mediante el envío de un paquete HTTP malicioso al sistema afectado. Con el exploit adecuado, el atacante podría provocar el reinicio de la interfaz de administrador web. Cisco Bug IDs: CSCve89149.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2017-08-03 CVE Reserved
- 2017-10-05 CVE Published
- 2023-04-07 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
CAPEC
References (3)
URL | Tag | Source |
---|---|---|
http://www.securityfocus.com/bid/101148 | Third Party Advisory | |
http://www.securitytracker.com/id/1039506 | Third Party Advisory |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-cms | 2019-10-09 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Cisco Search vendor "Cisco" | Meeting Server Search vendor "Cisco" for product "Meeting Server" | * | - |
Affected
|