CVE-2020-3160

CWE-20 — Improper Input ValidationCWE-416 — Use After Free6 documents6 sources
Severity
5.3MEDIUM
EPSS
0.7%
top 27.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Cisco Meeting ServerCisco Meeting Server
Timeline
PublishedFeb 19
Latest updateMay 24

Description

A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) feature of Cisco Meeting Server software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition for users of XMPP conferencing applications. Other applications and processes are unaffected. The vulnerability is due to improper input validation of XMPP packets. An attacker could exploit this vulnerability by sending crafted XMPP packets to an affected device. An exploit could allow the a…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5cisco/cisco_meeting_serverunspecified — n/a

🔴Vulnerability Details

2
GHSA
GHSA-96jq-mvwr-8h4g: A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) feature of Cisco Meeting Server software could allow an unauthenticated, remo↗2022-05-24
▶
CVEList
Cisco Meeting Server Extensible Messaging and Presence Protocol Denial of Service Vulnerability↗2020-02-19
▶

📋Vendor Advisories

2
Oracle
Oracle Oracle Retail Applications Risk Matrix: Xstore Services (Apache Cordova) — CVE-2017-3160↗2020-04-15
▶
Cisco
Cisco Meeting Server Extensible Messaging and Presence Protocol Denial of Service Vulnerability↗2020-02-19
▶
CVE-2020-3160 (MEDIUM CVSS 5.3) | A vulnerability in the Extensible M | cvebase.io