CVE-2018-0371: Input Validation

Published Jun 21, 2018

Updated

A vulnerability in the Web Admin Interface of Cisco Meeting Server could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient validation of incoming HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the Web Admin Interface of an affected Cisco Meeting Server. A successful exploit could allow the attacker to restart the system, terminating all ongoing calls and resulting in a DoS condition on the affected product. This vulnerability affects the following releases of Cisco Meeting Server: Acano X-Series, Cisco Meeting Server 1000, Cisco Meeting Server 2000. Cisco Bug IDs: CSCvi48624.

Affected Software

1 affected component

Cisco Meeting Server=2.2.5

Event History

Jun 21, 2018

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2018-0371?

CVE-2018-0371 is a vulnerability in the Web Admin Interface of Cisco Meeting Server that could allow an authenticated remote attacker to cause a denial of service (DoS) condition.

How can the CVE-2018-0371 vulnerability be exploited?

The CVE-2018-0371 vulnerability can be exploited by sending a crafted HTTP request to the Web Admin Interface of Cisco Meeting Server.

What is the severity of CVE-2018-0371?

The severity of CVE-2018-0371 is medium with a CVSS score of 6.5.

What is the affected software for CVE-2018-0371?

The affected software for CVE-2018-0371 is Cisco Meeting Server version 2.2.5.

How do I fix CVE-2018-0371?

To fix CVE-2018-0371, users should apply the necessary updates or patches provided by Cisco.