Design/Logic Flaw

Pexip Infinity Connect before 1.8.0 mishandles TLS certificate validation. The allow list is not properly checked...

Input validation

Pexip Infinity before 27.0 has improper WebRTC input validation. An unauthenticated remote attacker can use excessive resources, temporarily causing denial of service...

CVE-2022-23228

CVE-2022-23228 affects Pexip Infinity prior to 27.0. The issue is improper WebRTC input validation, enabling an unauthenticated remote attacker to exhaust resources and temporarily cause a denial-of-service condition. The description does not provide any exploitation details beyond this impact, n...

CVE-2022-23228

Pexip Infinity before 27.0 has improper WebRTC input validation. An unauthenticated remote attacker can use excessive resources, temporarily causing denial of service...

CVE-2021-29656

Pexip Infinity Connect before 1.8.0 mishandles TLS certificate validation. The allow list is not properly checked...

CVE-2021-29656

CVE-2021-29656 affects Pexip Infinity Connect (versions prior to 1.8.0). The root cause is improper TLS certificate validation and failure to properly check the allow list, as described in multiple sources. Impact is described as partial confidentiality, integrity, and availability losses (per CV...

CVE-2021-29655

CVE-2021-29655 affects Pexip Infinity Connect prior to 1.8.0, where provisioning authenticity checks are omitted. This can allow untrusted code to execute (remote code execution via network). Remediation: upgrade to 1.8.0 or later.

CVE-2021-29655

Pexip Infinity Connect before 1.8.0 omits certain provisioning authenticity checks. Thus, untrusted code may execute...

PT-2022-9927

Name of the Vulnerable Software and Affected Versions Pexip Infinity Connect versions prior to 1.8.0 Description The issue concerns the mishandling of TLS certificate validation, where the allow list is not properly checked. Recommendations For versions prior to 1.8.0, update to version 1.8.0 or...

CVE-2022-23228: Allocation of Resources Without Limits or Throttling

Pexip Infinity before 27.0 has improper WebRTC input validation. An unauthenticated remote attacker can use excessive resources, temporarily causing denial of service...

CVE-2021-29655: Insufficient Verification of Data Authenticity

Pexip Infinity Connect before 1.8.0 omits certain provisioning authenticity checks. Thus, untrusted code may execute...

CVE-2021-29656: Improper Certificate Validation

Pexip Infinity Connect before 1.8.0 mishandles TLS certificate validation. The allow list is not properly checked...

Pexip Infinity Trust Management Vulnerability

Pexip Infinity Pexip Video Conferencing Cloud Collaboration Platform is a video conferencing cloud collaboration platform from the Norwegian company Pexip. The product provides high quality and secure cloud conferencing capabilities.A security vulnerability exists in versions of Pexip Infinity...

Pexip Infinity data falsification vulnerability

Pexip Infinity is a cloud collaboration platform for video conferencing from Pexip, a Norwegian company. A security vulnerability exists in Pexip Infinity Connect versions prior to 1.8.0, which stems from the omission of certain resource provisioning authenticity checks. An attacker could exploit...

PT-2022-15908

Name of the Vulnerable Software and Affected Versions Pexip Infinity versions prior to 27.0 Description The issue is related to improper WebRTC input validation. An unauthenticated remote attacker can use excessive resources, temporarily causing denial of service. Recommendations For versions pri...

PT-2022-9926

Name of the Vulnerable Software and Affected Versions Pexip Infinity Connect versions prior to 1.8.0 Description The issue concerns the omission of certain provisioning authenticity checks, allowing untrusted code to execute. Recommendations For versions prior to 1.8.0, update to version 1.8.0 or...

Pexip Infinity security vulnerabilities

Pexip Infinity Pexip Video Conferencing Cloud Collaboration Platform is a video conferencing cloud collaboration platform from the Norwegian company Pexip. The product provides high quality and secure cloud conferencing capabilities.A security vulnerability exists in versions of Pexip Infinity...

Pexip Infinity Denial of Service Vulnerability (CNVD-2022-06484)

Pexip Infinity Pexip Video Conferencing Cloud Collaboration Platform is a video conferencing cloud collaboration platform from the Norwegian company Pexip. Pexip Infinity has a security vulnerability that could be exploited by attackers to remotely deny service...

Pexip Infinity Denial of Service Vulnerability (CNVD-2022-06483)

Pexip Infinity is a video conferencing cloud collaboration platform from Pexip, a Norwegian company. Pexip Infinity has a security vulnerability that could be exploited by attackers to cause a denial of service...

Pexip Infinity Denial of Service Vulnerability (CNVD-2022-06482)

Pexip Infinity Pexip Video Conferencing Cloud Collaboration Platform is a video conferencing cloud collaboration platform from the Norwegian company Pexip. Pexip Infinity has a security vulnerability that could be exploited by attackers to allow remote denial of service...