CVE-2018-0371
Last modified
CVE-2018-0371 is a vulnerability of currently unknown severity. A vulnerability in the Web Admin Interface of Cisco Meeting Server could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient validation of incoming HTTP requests. EPSS estimates a 3.23% chance of exploitation in the next 30 days.
Description
A vulnerability in the Web Admin Interface of Cisco Meeting Server could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient validation of incoming HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the Web Admin Interface of an affected Cisco Meeting Server. A successful exploit could allow the attacker to restart the system, terminating all ongoing calls and resulting in a DoS condition on the affected product. This vulnerability affects the following releases of Cisco Meeting Server: Acano X-Series, Cisco Meeting Server 1000, Cisco Meeting Server 2000. Cisco Bug IDs: CSCvi48624.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Meeting Server | 2.2.5 |
References
- http://www.securityfocus.com/bid/104582Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041175Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/104582Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041175Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-0371?
How severe is CVE-2018-0371?
How do I fix CVE-2018-0371?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-0365A vulnerability in the web-based management interface of Cis…
- CVE-2018-0366A vulnerability in the web-based management interface of Cis…
- CVE-2018-0367A vulnerability in the web-based management interface of the…
- CVE-2018-0368A vulnerability in Cisco Digital Network Architecture (DNA) …
- CVE-2018-0369A vulnerability in the reassembly logic for fragmented IPv4 …
- CVE-2018-0370A vulnerability in the detection engine of Cisco Firepower S…
- CVE-2018-0372A vulnerability in the DHCPv6 feature of the Cisco Nexus 900…
- CVE-2018-0373A vulnerability in vpnva-6.sys for 32-bit Windows and vpnva6…
- CVE-2018-0374A vulnerability in the Policy Builder database of Cisco Poli…
- CVE-2018-0375A vulnerability in the Cluster Manager of Cisco Policy Suite…
- CVE-2018-0376A vulnerability in the Policy Builder interface of Cisco Pol…
- CVE-2018-0377A vulnerability in the Open Systems Gateway initiative (OSGi…
Are you affected by CVE-2018-0371?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
