Lucene search

K
ciscoCiscoCISCO-SA-20181107-VSMS-DOS
HistoryNov 07, 2018 - 4:00 p.m.

Cisco Video Surveillance Media Server Denial of Service Vulnerability

2018-11-0716:00:00
tools.cisco.com
573

EPSS

0.001

Percentile

41.6%

A vulnerability in the web-based management interface of Cisco Video Surveillance Media Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of the web-based management interface of an affected system.

The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected service. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link. A successful exploit could allow the attacker to cause the web-based management interface to become unreachable, resulting in a DoS condition.

There are no workarounds that address this vulnerability.

This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-vsms-dos [“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-vsms-dos”]

Affected configurations

Vulners
Node
ciscovideo_surveillance_media_serverMatchany
OR
ciscovideo_surveillance_managerMatchany
OR
ciscovideo_surveillance_media_serverMatchany
OR
ciscovideo_surveillance_managerMatchany
VendorProductVersionCPE
ciscovideo_surveillance_media_serveranycpe:2.3:a:cisco:video_surveillance_media_server:any:*:*:*:*:*:*:*
ciscovideo_surveillance_manageranycpe:2.3:a:cisco:video_surveillance_manager:any:*:*:*:*:*:*:*

EPSS

0.001

Percentile

41.6%

Related for CISCO-SA-20181107-VSMS-DOS