CVE-2017-3830: Input Validation
First published: Wed Feb 22 2017(Updated: )
A vulnerability in an internal API of the Cisco Meeting Server (CMS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected appliance. More Information: CSCvc89678. Known Affected Releases: 2.1. Known Fixed Releases: 2.1.2.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Meeting Server | =2.1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-3830?
CVE-2017-3830 has been classified as a high severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2017-3830?
To fix CVE-2017-3830, upgrade Cisco Meeting Server to version 2.1.2 or later.
What types of attackers can exploit CVE-2017-3830?
CVE-2017-3830 can be exploited by unauthenticated, remote attackers.
What is the impact of CVE-2017-3830 on affected systems?
The impact of CVE-2017-3830 is a denial of service condition on the affected Cisco Meeting Server appliance.
Which versions of Cisco Meeting Server are affected by CVE-2017-3830?
Cisco Meeting Server version 2.1.0 is affected by CVE-2017-3830.
- collector/nvd-index
- vendor/cisco
- canonical/cisco meeting server
- version/cisco meeting server/2.1.0