Skip to content
OpenAdvisories
Medium · 5.9 CVE-2021-40122 EUVD-2021-27309GHSA-3rqh-cwpr-p993

Cisco Meeting Server Call Bridge Denial of Service Vulnerability

Published Oct 21, 2021 · Updated Nov 7, 2024 · Assigned by cisco

Description

A vulnerability in an API of the Call Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper handling of large series of message requests. An attacker could exploit this vulnerability by sending a series of messages to the vulnerable API. A successful exploit could allow the attacker to cause the affected device to reload, dropping all ongoing calls and resulting in a DoS condition.

Affected products

VendorProductAffectedFixed
Cisco Cisco Meeting Server — —

References