CVE-2018-0263: High severity cisco webex meetings server vulnerability
A vulnerability in Cisco Meeting Server (CMS) could allow an unauthenticated, adjacent attacker to access services running on internal device interfaces of an affected system. The vulnerability is due to incorrect default configuration of the device, which can expose internal interfaces and ports on the external interface of the system. A successful exploit could allow the attacker to gain unauthenticated access to configuration and database files and sensitive meeting information on an affected system. This vulnerability affects Cisco Meeting Server (CMS) 2000 Platforms that are running a CMS Software release prior to Release 2.2.13 or Release 2.3.4. Cisco Bug IDs: CSCvg76471.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-0263?
CVE-2018-0263 is a vulnerability in Cisco Meeting Server (CMS) that allows an unauthenticated, adjacent attacker to access services running on internal device interfaces.
How does CVE-2018-0263 occur?
CVE-2018-0263 occurs due to incorrect default configuration of the Cisco Meeting Server, which exposes internal interfaces and ports.
What is the severity of CVE-2018-0263?
CVE-2018-0263 has a severity rating of 7.4 (high).
Which software versions are affected by CVE-2018-0263?
Cisco Meeting Server versions up to and excluding 2.2.13 and 2.3.4 are affected by CVE-2018-0263.
How can I fix CVE-2018-0263?
To fix CVE-2018-0263, upgrade your Cisco Meeting Server to a version that is not affected by the vulnerability.