CVE-2017-3837

An HTTP Packet Processing vulnerability in the Web Bridge interface of the Cisco Meeting Server (CMS), formerly Acano Conferencing Server, could allow an authenticated, remote attacker to retrieve memory contents, which could lead to the disclosure of confidential information. In addition, the attacker could potentially cause the application to crash unexpectedly, resulting in a denial of service (DoS) condition. The attacker would need to be authenticated and have a valid session with the Web Bridge. Affected Products: This vulnerability affects Cisco Meeting Server software releases prior to 2.1.2. This product was previously known as Acano Conferencing Server. More Information: CSCvc89551. Known Affected Releases: 2.0 2.0.7 2.1. Known Fixed Releases: 2.1.2.

• CWE-20

• http://www.securityfocus.com/bid/96243
• http://www.securitytracker.com/id/1037834
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-cms1Vendor Advisory
• http://www.securityfocus.com/bid/96243
• http://www.securitytracker.com/id/1037834
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-cms1Vendor Advisory

Published

Feb 22, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-3831A vulnerability in the web-based GUI of Cisco Mobility Expre…
• CVE-2017-3832A vulnerability in the web management interface of Cisco Wir…7.5
• CVE-2017-3833A vulnerability in the web framework of Cisco Unified Commun…
• CVE-2017-3834A vulnerability in Cisco Aironet 1830 Series and Cisco Airon…9.8
• CVE-2017-3835A vulnerability in the sponsor portal of Cisco Identity Serv…
• CVE-2017-3836A vulnerability in the web framework Cisco Unified Communica…
• CVE-2017-3838A vulnerability in Cisco Secure Access Control System (ACS) …
• CVE-2017-3839An XML External Entity vulnerability in the web-based user i…
• CVE-2017-3840A vulnerability in the web interface of the Cisco Secure Acc…
• CVE-2017-3841A vulnerability in the web interface of the Cisco Secure Acc…
• CVE-2017-3842A vulnerability in the web-based management interface of the…
• CVE-2017-3843A vulnerability in the file download functions for Cisco Pri…