NVD

Id
82548  
Name
CVE-2017-3837  
Description
An HTTP Packet Processing vulnerability in the Web Bridge interface of the Cisco Meeting Server (CMS), formerly Acano Conferencing Server, could allow an authenticated, remote attacker to retrieve memory contents, which could lead to the disclosure of confidential information. In addition, the attacker could potentially cause the application to crash unexpectedly, resulting in a denial of service (DoS) condition. The attacker would need to be authenticated and have a valid session with the Web Bridge. Affected Products: This vulnerability affects Cisco Meeting Server software releases prior to 2.1.2. This product was previously known as Acano Conferencing Server. More Information: CSCvc89551. Known Affected Releases: 2.0 2.0.7 2.1. Known Fixed Releases: 2.1.2.  
Reject
 
CVSS Version
2  
CVSS Score
5.5  
Severity
Medium  
CVSS Base Score
5.5  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:P)  
Pub Date
2017-03-18  
Published
2017-02-21  
Modified Date
2017-02-28  
Seq
2017-3837  

Actions

Related NVD References

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
65265 JVNDB-2017-001632 Cisco Meeting Server の Web Bridge インターフェースにおけるメモリの内容を取得される脆弱性 Cisco Meeting Server (CMS、旧 Acano Conferencing Server) の Web Bridge インターフェースの HTTP パケット処理には、メモリの内容を取得される脆弱性が存在します。 CVE-2017-3837 CVE-2017-3837 82548 5.5 8.1 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-001632.html 2017-02-15 2017-03-10 View