vulnwire
7.4high

CVE-2018-0263

A vulnerability in Cisco Meeting Server (CMS) could allow an unauthenticated, adjacent attacker to access services running on internal devi…

Published 8 y ago · modified 4 mo ago · JSON

CVSS
7.4
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
0.7%
percentile 54%
Public exploits
0
none known

A vulnerability in Cisco Meeting Server (CMS) could allow an unauthenticated, adjacent attacker to access services running on internal device interfaces of an affected system. The vulnerability is due to incorrect default configuration of the device, which can expose internal interfaces and ports on the external interface of the system. A successful exploit could allow the attacker to gain unauthenticated access to configuration and database files and sensitive meeting information on an affected system. This vulnerability affects Cisco Meeting Server (CMS) 2000 Platforms that are running a CMS Software release prior to Release 2.2.13 or Release 2.3.4. Cisco Bug IDs: CSCvg76471.

CISA SSVC assessment

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
23 mo ago

Exploit prediction (EPSS)

0.72% probability of exploitation in the next 30 days, higher than 54% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.17.4CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
NVD2.03.3AV:A/AC:L/Au:N/C:P/I:N/A:N

Affected products

  • n/a Cisco Meeting Server unknown

Classification

Weakness
  • CWE-16 Configuration
  • CWE-1188 Initialization of a Resource with an Insecure Default

References

  • securityfocus.com /bid/104419 · vdb-entry, x_refsource_BID, x_transferred
  • securitytracker.com /id/1041065 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • tools.cisco.com /security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-cms-id · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.