CVE-2018-0263

A vulnerability in Cisco Meeting Server (CMS) could allow an unauthenticated, adjacent attacker to access services running on internal device interfaces of an affected system. The vulnerability is due to incorrect default configuration of the device, which can expose internal interfaces and ports on the external interface of the system. A successful exploit could allow the attacker to gain unauthenticated access to configuration and database files and sensitive meeting information on an affected system. This vulnerability affects Cisco Meeting Server (CMS) 2000 Platforms that are running a CMS Software release prior to Release 2.2.13 or Release 2.3.4. Cisco Bug IDs: CSCvg76471.

• CWE-16
• CWE-1188

• http://www.securityfocus.com/bid/104419Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041065Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-cms-idVendor Advisory
• http://www.securityfocus.com/bid/104419Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041065Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-cms-idVendor Advisory

Published

Jun 7, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0256A vulnerability in the peer-to-peer message processing funct…
• CVE-2018-0257A vulnerability in Cisco IOS XE Software running on Cisco cB…
• CVE-2018-0258A vulnerability in the Cisco Prime File Upload servlet affec…
• CVE-2018-0259A vulnerability in the web-based management interface of Cis…
• CVE-2018-0260A vulnerability in the web interface of Cisco MATE Live coul…
• CVE-2018-0262A vulnerability in Cisco Meeting Server could allow an unaut…
• CVE-2018-0264A vulnerability in the Cisco WebEx Network Recording Player …
• CVE-2018-0265Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-0266A vulnerability in the web framework of Cisco Unified Commun…4.3
• CVE-2018-0267A vulnerability in the web framework of Cisco Unified Commun…6.5
• CVE-2018-0268A vulnerability in the container management subsystem of Cis…
• CVE-2018-0269A vulnerability in the web framework of the Cisco Digital Ne…4.3