Cisco Meeting Server Flaw Let Attacker Trigger a DoS Attack

Cisco has warned about a indispensable security utter within the Net Bridge feature of the Cisco Meeting Server. The flaw (CVE-2023-20255) would possibly perchance perchance maybe let any individual who’s no longer authorized attack the draw and put off a DoS condition.

Insufficient question verification by the draw causes the problem when processing web requests.

Sending malicious requests to the draw would possibly perchance perchance maybe put off it to rupture, which has the aptitude to have an effect on the video calls that utilize the Net Bridge efficiency.

The Net Bridge’s efficiency shall be disrupted and put off video calls to fail if it receives excessive unpleasant requests.

Cisco Meeting Server Flaw

Cisco has addressed the problem by releasing up so some distance instrument variations that no longer enjoy the problem. The utter is restricted to the Cisco Meeting Server platform.

Users will enjoy to soundless change their instrument to the brand new variations that Cisco has made. Cisco additionally advises customers to take a look at their security page in total for additional files and choices.

Users who’re looking out to interchange their instrument will enjoy to soundless be definite that their gadgets enjoy ample reminiscence and that their hardware and instrument are admire minded with the brand new variations.

Cisco has made a desk that shows which variations of the Cisco Meeting Server enjoy the problem and which variations are fixed:

• Cisco Meeting Server Starting up 3.5 and earlier: Users will enjoy to soundless alternate to the fixed model.
• Cisco Meeting Server Starting up 3.6:Upgrade to model 3.6.1, which has the repair.
• Cisco Meeting Server Releases 3.7 and 3.8: No longer tormented by this utter.

Cisco’s security crew has checked the uncomplicated project in this article and ensured it is lawful and reliable.

As per this advisory, there were no public announcements or reviews of malicious exploitation of the vulnerability that Cisco PSIRT is at demonstrate attentive to.

Cisco found this utter when working with a customer with one other utter. Cisco is continually trying to search out and repair security concerns rapidly.

Cisco’s swiftly response to this utter shows how they work with others within the cybersecurity community to take care of everybody safe on-line.

Gaze for additional updates and alerts from Cisco and diverse cybersecurity experts to supply protection to your methods from new threats.