CVE-2019-1678: Cisco Meeting Server Denial of Service Vulnerability
First published: Wed Feb 06 2019(Updated: )
A vulnerability in Cisco Meeting Server could allow an authenticated, remote attacker to cause a partial denial of service (DoS) to Cisco Meetings application users who are paired with a Session Initiation Protocol (SIP) endpoint. The vulnerability is due to improper validation of coSpaces configuration parameters. An attacker could exploit this vulnerability by inserting crafted strings in specific coSpace parameters. An exploit could allow the attacker to prevent clients from joining a conference call in the affected coSpace. Versions prior to 2.4.3 are affected.
Credit: ykramarz@cisco.com ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Meeting Server | =2.3.6 | |
| =2.3.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this Cisco Meeting Server vulnerability?
The vulnerability ID of this Cisco Meeting Server vulnerability is CVE-2019-1678.
What is the severity level of CVE-2019-1678?
The severity level of CVE-2019-1678 is medium, with a severity value of 4.3.
What is the impact of CVE-2019-1678?
CVE-2019-1678 can cause a partial denial of service (DoS) to Cisco Meetings application users who are paired with a Session Initiation Protocol (SIP) endpoint.
Which version of Cisco Meeting Server is affected by CVE-2019-1678?
Cisco Meeting Server version 2.3.6 is affected by CVE-2019-1678.
Where can I find more information about CVE-2019-1678?
More information about CVE-2019-1678 can be found at the following references: [SecurityFocus](http://www.securityfocus.com/bid/106943) and [Cisco Security Advisory](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190206-cms-dos).
- collector/nvd-index
- agent/references
- agent/type
- agent/title
- agent/weakness
- agent/severity
- agent/description
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/cisco
- canonical/cisco meeting server
- version/cisco meeting server/2.3.6