CVE-2017-12293
Last modified
CVE-2017-12293 is a vulnerability of currently unknown severity. A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient limitations on the number of connections that can be made to the affected software. EPSS estimates a 2.30% chance of exploitation in the next 30 days.
Description
A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient limitations on the number of connections that can be made to the affected software. An attacker could exploit this vulnerability by opening multiple connections to the server and exhausting server resources. A successful exploit could cause the server to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvf41006.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Webex Meetings Server | 2.7 |
References
- http://www.securityfocus.com/bid/101492Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039618Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/101492Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039618Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-12293?
How severe is CVE-2017-12293?
How do I fix CVE-2017-12293?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-12288A vulnerability in the web-based management interface of Cis…
- CVE-2017-12289A vulnerability in conditional, verbose debug logging for th…
- CVE-2017-1229IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) could a…
- CVE-2017-12290Multiple vulnerabilities in the web interface of the Cisco R…
- CVE-2017-12291Multiple vulnerabilities in the web interface of the Cisco R…
- CVE-2017-12292Multiple vulnerabilities in the web interface of the Cisco R…
- CVE-2017-12294A vulnerability in Cisco WebEx Meetings Server could allow a…
- CVE-2017-12295A vulnerability in Cisco WebEx Meetings Server could allow a…
- CVE-2017-12296A vulnerability in Cisco WebEx Meetings Server could allow a…
- CVE-2017-12297A vulnerability in Cisco WebEx Meeting Center could allow an…
- CVE-2017-12298A vulnerability in Cisco WebEx Meeting Center could allow an…
- CVE-2017-12299A vulnerability exists in the process of creating default IP…
Are you affected by CVE-2017-12293?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
