What is CVE-2020-16139?

CVE-2020-16139 is a vulnerability in N/a. Published 2020-08-12.

Is CVE-2020-16139 known to be exploited?

15 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2020-16139

A denial-of-service in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers restart the device remotely through sending specially crafted packets. Note: We cannot prove this vulnerability exists. Out of an abu…

EPSS: 0.876 (99.5th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

rapid7/metasploit-framework
20142995/nuclei-templates
ARPSyndicate/cvemon
ARPSyndicate/kenzer-templates
Elsfa7-110/kenzer-templates
Fans0n-Fan/Cisco-7937G-All-In-One-Exploiter
StarCrossPortal/scalpel
anonymous364872/Rapier_
apif-review/APIF_
apit-review-account/apit-tool

References

packetstormsecurity.com/files/158819/Cisco-7937G-Denial-Of-Service.html (x_refsource_MISC)
www.blacklanternsecurity.com/2020-08-07-Cisco-Unified-IP-Conference-Station-793… (x_refsource_MISC)
www.cisco.com/c/en/us/products/collateral/collaboration-endpoints/unified-ip-ph… (x_refsource_MISC)

Frequently asked questions

What is CVE-2020-16139?: CVE-2020-16139 is a vulnerability in N/a. Published 2020-08-12.
Is CVE-2020-16139 known to be exploited?: 15 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.