Vulnerability fixed in Cisco Meeting Server

🗓️ 21 Oct 2021 00:00:00Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 6 Views

Cisco Meeting Server fix for a DoS vulnerability CVE 2021 40122 enables reboot by flooding the Call Bridge API.

Reporter	Title	Published	Views	Family All 79
BDU FSTEC	The vulnerability of the command-line interface (CLI) of Cisco IOS XE operating systems, which allows a hacker to execute arbitrary commands	3 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of the Cisco Identity Services Engine allows a perpetrator to carry out a cross-site scripting attack.	7 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of the Cisco Identity Services Engine allows a perpetrator to carry out a cross-site scripting attack.	7 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software interface of the Cisco Meeting Server platform allows a hacker to trigger a service failure or cause the device to restart.	7 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the application integration function for Cisco WebEx Meetings allows attackers to perform cross-site fraudulently.	22 Feb 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of the software for centralized control of Cisco TelePresence Management Suite (TMS) allows a perpetrator to execute arbitrary code or gain unauthorized access to protected information.	20 Oct 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to upload arbitrary files.	22 Nov 202200:00	–	bdu_fstec
Circl	CVE-2021-1529	21 Oct 202107:36	–	circl
Circl	CVE-2021-34738	21 Oct 202107:36	–	circl
Circl	CVE-2021-34743	21 Oct 202107:36	–	circl

21 Oct 2021 00:00Current

7High risk

Vulners AI Score7

CVSS 26.9

CVSS 3.17.8

CVSS 34.8

EPSS0.01126

SSVC

Cisco Meeting Server Denial of Service Unauthenticated remote attacker Call Bridge API CVE 2021 40122