CVE-2019-1676: A vulnerability in the Session Initiation Protocol (SIP) call processing of Cisco Meeting Server (CMS) software could allow an unauthenticated, remote attacker…

PriorityP341high7.5CVSS 3.0

AVNACLPRNUINSUCNINAH

EPSS

1.82%

76.3th percentile

A vulnerability in the Session Initiation Protocol (SIP) call processing of Cisco Meeting Server (CMS) software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition of the Cisco Meeting Server. The vulnerability is due to insufficient validation of Session Description Protocol (SDP) messages. An attacker could exploit this vulnerability by sending a crafted SDP message to the CMS call bridge. An exploit could allow the attacker to cause the CMS to reload, causing a DoS condition for all connected clients. Versions prior to 2.3.9 are affected.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
cisco	cisco_meeting_server	>= unspecified < 2.3.9	2.3.9
cisco	meeting_server	>= 2.3.0 < 2.3.9	2.3.9
cisco	meeting_server_sip_processing	—	—

CVSS provenance

nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

vendor_cisco6.8MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.