CVE-2020-16138: High severity cisco unified ip conference station 7937g firmware vulnerability
UNSUPPORTED WHEN ASSIGNED A denial-of-service issue in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to remotely disable the device until it is power cycled. Note: We cannot prove this vulnerability exists. Out of an abundance of caution, this CVE is being assigned to better serve our customers and ensure all who are still running this product understand that the product is end of life and should be removed or upgraded. For more information on this, and how to upgrade, refer to the CVE’s reference information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-16138?
CVE-2020-16138 is classified as a denial-of-service vulnerability.
How do I fix CVE-2020-16138?
There is no official fix for CVE-2020-16138 as the affected device is no longer supported.
What devices are affected by CVE-2020-16138?
CVE-2020-16138 affects the Cisco Unified IP Conference Station 7937G running firmware versions 1.4.4.0 through 1.4.5.7.
Can CVE-2020-16138 be exploited remotely?
Yes, CVE-2020-16138 can be exploited remotely, allowing attackers to disable the device.
Is there a workaround for CVE-2020-16138?
Currently, there are no documented workarounds for CVE-2020-16138.