CVE-2017-12249

A vulnerability in the Traversal Using Relay NAT (TURN) server included with Cisco Meeting Server (CMS) could allow an authenticated, remote attacker to gain unauthenticated or unauthorized access to components of or sensitive information in an affected system. The vulnerability is due to an incorrect default configuration of the TURN server, which could expose internal interfaces and ports on the external interface of an affected system. An attacker could exploit this vulnerability by using a TURN server to perform an unauthorized connection to a Call Bridge, a Web Bridge, or a database cluster in an affected system, depending on the deployment model and CMS services in use. A successful exploit could allow the attacker to gain unauthenticated access to a Call Bridge or database cluster in an affected system or gain unauthorized access to sensitive meeting information in an affected system. To exploit this vulnerability, the attacker must have valid credentials for the TURN server of the affected system. This vulnerability affects Cisco Meeting Server (CMS) deployments that are running a CMS Software release prior to Release 2.0.16, 2.1.11, or 2.2.6. Cisco Bug IDs: CSCvf51127.

• CWE-16
• CWE-668

• http://www.securityfocus.com/bid/100821Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039357Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170913-cmsturnVendor Advisory
• http://www.securityfocus.com/bid/100821Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039357Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170913-cmsturnVendor Advisory

Published

Sep 13, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12240The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and …9.8
• CVE-2017-12243A vulnerability in the Cisco Unified Computing System (UCS) …
• CVE-2017-12244A vulnerability in the detection engine parsing of IPv6 pack…
• CVE-2017-12245A vulnerability in SSL traffic decryption for Cisco Firepowe…
• CVE-2017-12246A vulnerability in the implementation of the direct authenti…
• CVE-2017-12248A vulnerability in the web framework code of Cisco Unified I…
• CVE-2017-1225IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5…
• CVE-2017-12250A vulnerability in the HTTP web interface for Cisco Wide Are…
• CVE-2017-12251A vulnerability in the web console of the Cisco Cloud Servic…
• CVE-2017-12252A vulnerability in the Cisco FindIT Network Discovery Utilit…
• CVE-2017-12253A vulnerability in the Cisco Unified Intelligence Center cou…
• CVE-2017-12254A vulnerability in the web interface of Cisco Unified Intell…