What is CVE-2017-12293?

CVE-2017-12293 is a high-severity vulnerability in Cisco Webex Meetings Server, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 8.6/10. Published 2017-10-19.

How severe is CVE-2017-12293?

High severity. CVSS v3 base score is 8.6 out of 10.

Buffer overflow in Cisco Webex Meetings Server

CVE-2017-12293

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient limitations on the number of connections that can be made to the affected software. An attacker could exploit this vulnerability by opening multiple connections to the server and exhausting server resources. A successful exploit could cause the server to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvf41006.

Vulnerability class: Buffer Overflow

EPSS: 0.023 (82.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.6 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H.

Affected products

Cisco Webex_meetings_server — versions 2.7
N/a Cisco Webex Meetings Server — versions Cisco WebEx Meetings Server

Weakness classification (CWE)

References

psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)

Frequently asked questions

What is CVE-2017-12293?: CVE-2017-12293 is a high-severity vulnerability in Cisco Webex Meetings Server, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 8.6/10. Published 2017-10-19.
How severe is CVE-2017-12293?: High severity. CVSS v3 base score is 8.6 out of 10.