A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.

Published 9 y ago 2017-10-19 · modified 4 mo ago 2026-06-17 · JSON

CVSS

8.6

v3.0 · NVD

CISA KEV

not known exploited

EPSS

2.3%

percentile 83%

Public exploits

none known

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient limitations on the number of connections that can be made to the affected software. An attacker could exploit this vulnerability by opening multiple connections to the server and exhausting server resources. A successful exploit could cause the server to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvf41006.

Exploit prediction (EPSS)

2.30% probability of exploitation in the next 30 days, higher than 83% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.0	8.6	`CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H`
NVD	2.0	5.0	`AV:N/AC:L/Au:N/C:N/I:N/A:P`

Affected products

n/a Cisco WebEx Meetings Server

Classification

Weakness

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-400 Uncontrolled Resource Consumption

References

tools.cisco.com /security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-wms · x_refsource_CONFIRM, x_transferred
securityfocus.com /bid/101492 · vdb-entry, x_refsource_BID, x_transferred
securitytracker.com /id/1039618 · vdb-entry, x_refsource_SECTRACK, x_transferred

Sources

CVE List: CVE-2017-12293
NVD: CVE-2017-12293

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.