CVE-2021-40122

A vulnerability in an API of the Call Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper handling of large series of message requests. An attacker could exploit this vulnerability by sending a series of messages to the vulnerable API. A successful exploit could allow the attacker to cause the affected device to reload, dropping all ongoing calls and resulting in a DoS condition.

• CWE-399
• CWE-404

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cms-LAHe8z5vVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cms-LAHe8z5vVendor Advisory

Published

Oct 21, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-40116Multiple Cisco products are affected by a vulnerability in S…7.5
• CVE-2021-40117A vulnerability in SSL/TLS message handler for Cisco Adaptiv…7.5
• CVE-2021-40118A vulnerability in the web services interface of Cisco Adapt…7.5
• CVE-2021-40119A vulnerability in the key-based SSH authentication mechanis…9.8
• CVE-2021-40120A vulnerability in the web-based management interface of cer…7.2
• CVE-2021-40121Multiple vulnerabilities in the web-based management interfa…4.8
• CVE-2021-40123A vulnerability in the web-based management interface of Cis…6.5
• CVE-2021-40124A vulnerability in the Network Access Manager (NAM) module o…7.8
• CVE-2021-40125A vulnerability in the Internet Key Exchange Version 2 (IKEv…6.5
• CVE-2021-40126A vulnerability in the web-based dashboard of Cisco Umbrella…4.3
• CVE-2021-40127A vulnerability in the web-based management interface of Cis…5.3
• CVE-2021-40128A vulnerability in the account activation feature of Cisco W…5.3