The vulnerability of the Yealink Meeting Server lies in the lack of measures taken to neutralize special elements used in the operating system command line. This allows attackers to execute arbitrary commands with root privileges.

The vulnerability of the Yealink Meeting Server exists because measures to neutralize special elements used in the operating system are not taken. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges remotely...

PT-2023-8334 · Yealink · Yealink Meeting Server

Name of the Vulnerable Software and Affected Versions: Yealink Meeting Server affected versions not specified Description: The issue exists due to the failure to neutralize special elements used in an operating system command. This could allow a remote attacker to execute arbitrary commands with...

PT-2024-59: OS Command Injection in Yealink Meeting Server (YMS)

The vulnerability was identified in Yealink Meeting Server YMS , versions V26.0.0.66. The discovered vulnerability can be exploited by an internal attacker to execute commands with superuser privileges, which can lead to privilege escalation on the vulnerable host. Vulnerability status: Confirmed...

Vulnerability fixed in Cisco Meeting Server

Cisco has fixed a vulnerability in Meeting Server. A unauthenticated malicious person could exploit the vulnerability to cause a denial-of-service. Cisco has released updates to fix the vulnerability in Meeting Server. For more information, see:...

CVE-2023-20255

A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending...

CVE-2023-20255

A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending...

Design/Logic Flaw

A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending...

CVE-2023-20255

CVE-2023-20255 affects Cisco Meeting Server Web Bridge API. Unable to validate HTTP requests allows an unauthenticated, remote attacker to trigger DoS, causing partial availability and dropped video calls due to invalid packets reaching the Web Bridge. Exploitation details across sources show net...

CVE-2023-20255

A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending...

Cisco Meeting Server Web Bridge Denial of Service Vulnerability

A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending...

Cisco Meeting Server Security Vulnerability

Cisco Meeting Server Acano Conferencing Server is a suite of audio and video conferencing server software from Cisco. A security vulnerability exists in Cisco Meeting Server, which stems from a vulnerability in the API for the Web Bridge feature that could lead to a denial of service...

PT-2023-9399 · Yealink · Yealink Meeting Server

Name of the Vulnerable Software and Affected Versions: Yealink Meeting Server versions prior to V26.0.0.67 Description: The issue is related to insufficient protection of service data, allowing a remote attacker to gain access to user credentials. This can be achieved by sending an HTTP request...

The vulnerability of the API interface of the Cisco Meeting Server platform allows a hacker to trigger a service failure.

The vulnerability of the Cisco Meeting Server’s API interface relates to insufficient validation of input data during request processing. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted requests...

The vulnerability of the software interface of the Cisco Meeting Server platform allows a hacker to trigger a service failure or cause the device to restart.

The vulnerability of the Cisco Meeting Server software interface is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to trigger a system restart and cause service failure...

CVE-2021-40122

A vulnerability in an API of the Call Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to improper handling of large series of message requests. An attacker could exploit this vulnerability...

CVE-2021-40122

A vulnerability in an API of the Call Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to improper handling of large series of message requests. An attacker could exploit this vulnerability...

Race condition

A vulnerability in an API of the Call Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to improper handling of large series of message requests. An attacker could exploit this vulnerability...

CVE-2021-40122 Cisco Meeting Server Call Bridge Denial of Service Vulnerability

A vulnerability in an API of the Call Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to improper handling of large series of message requests. An attacker could exploit this vulnerability...

CVE-2021-40122 Cisco Meeting Server Call Bridge Denial of Service Vulnerability

A vulnerability in an API of the Call Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to improper handling of large series of message requests. An attacker could exploit this vulnerability...

CVE-2021-40122

The CVE-2021-40122 issue affects Cisco Meeting Server (Call Bridge API). Affected component: Call Bridge API handling of large series of message requests. Root cause: improper handling leading to denial of service when an unauthenticated remote attacker sends a flood of messages. Impact: device r...