What’s Vulnerable › Vulnerabilities

CVE-2017-12362

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-11-30 · updated 2026-06-17
• Weakness: CWE-399

Description

A vulnerability in Cisco Meeting Server versions prior to 2.2.2 could allow an authenticated, remote attacker to cause the system to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to video calls being made on systems with a particular configuration. An attacker could exploit this by knowing a valid URI that directs to a Cisco Meeting Server. An attacker could then make a video call and cause the system to reload. Cisco Bug IDs: CSCve65931.

Affected products

• Cisco Meeting Server: before 2.2.2 — fixed in 2.2.2

How to fix

Upgrade to a fixed version: Cisco Meeting Server 2.2.2. Check the vendor advisory for mitigations.

References

• http://www.securityfocus.com/bid/101987
• http://www.securitytracker.com/id/1039913
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-cms
• http://www.securityfocus.com/bid/101987
• http://www.securitytracker.com/id/1039913
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-cms

Get alerted when CVE-2017-12362 or the next vulnerability affects your stack