Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mfw4-g24x-w66h

Опубликовано: 01 нояб. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP packets to an affected device. A successful exploit could allow the attacker to cause a partial availability condition, which could cause ongoing video calls to be dropped due to the invalid packets reaching the Web Bridge.

A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP packets to an affected device. A successful exploit could allow the attacker to cause a partial availability condition, which could cause ongoing video calls to be dropped due to the invalid packets reaching the Web Bridge.

EPSS

Процентиль: 22%
0.00074
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 5.3
nvd
больше 2 лет назад

A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP packets to an affected device. A successful exploit could allow the attacker to cause a partial availability condition, which could cause ongoing video calls to be dropped due to the invalid packets reaching the Web Bridge.

CVSS3: 5.3
fstec
больше 2 лет назад

Уязвимость реализации прикладного программного интерфейса платформы для проведения конференций Cisco Meeting Server, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 22%
0.00074
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-20