Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-20255

Опубликовано: 01 нояб. 2023
Источник: nvd
CVSS3: 5.3
EPSS Низкий

Описание

A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP packets to an affected device. A successful exploit could allow the attacker to cause a partial availability condition, which could cause ongoing video calls to be dropped due to the invalid packets reaching the Web Bridge.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:cisco:meeting_server:*:*:*:*:*:*:*:*
Версия до 3.6.1 (исключая)

EPSS

Процентиль: 22%
0.00074
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-20
NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 5.3
github
больше 2 лет назад

A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP packets to an affected device. A successful exploit could allow the attacker to cause a partial availability condition, which could cause ongoing video calls to be dropped due to the invalid packets reaching the Web Bridge.

CVSS3: 5.3
fstec
больше 2 лет назад

Уязвимость реализации прикладного программного интерфейса платформы для проведения конференций Cisco Meeting Server, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 22%
0.00074
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-20
NVD-CWE-noinfo