CVE-2021-1524: Cisco Meeting Server API Denial of Service Vulnerability
A vulnerability in the API of Cisco Meeting Server could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because requests that are sent to the API are not properly validated. An attacker could exploit this vulnerability by sending a malicious request to the API. A successful exploit could allow the attacker to cause all participants on a call to be disconnected, resulting in a DoS condition.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-1524?
CVE-2021-1524 is a vulnerability in the API of Cisco Meeting Server that could allow an authenticated remote attacker to cause a denial of service (DoS) condition on an affected device.
How does the vulnerability occur?
The vulnerability occurs because requests sent to the API of Cisco Meeting Server are not properly validated.
What is the severity of CVE-2021-1524?
CVE-2021-1524 has a severity rating of 6.5, which is considered medium.
Which version of Cisco Meeting Server is affected by CVE-2021-1524?
Cisco Meeting Server versions from 3.1 to 3.1.1 are affected by CVE-2021-1524.
How can the vulnerability be fixed?
To fix the vulnerability, it is recommended to apply the necessary updates provided by Cisco in their security advisory.