Skip to content
OpenAdvisories
Medium · 5.3 CVE-2023-20255 EUVD-2023-24434GHSA-mfw4-g24x-w66h

A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a deni…

Published Nov 1, 2023 · Updated Aug 2, 2024 · Assigned by cisco

Description

A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP packets to an affected device. A successful exploit could allow the attacker to cause a partial availability condition, which could cause ongoing video calls to be dropped due to the invalid packets reaching the Web Bridge.

Affected products

VendorProductAffectedFixed
Cisco Cisco Meeting Server N/A —

Advisories 1

References