PT-2016-6921

CVE-2016-6448

·

Published

2016-11-03

·

Updated

2017-07-29

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Cisco Meeting Server versions prior to 2.0.3 Acano Server versions 1.8.x prior to 1.8.17 Acano Server versions 1.9.x prior to 1.9.5
Description A vulnerability in the Session Description Protocol (SDP) parser could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system.
Recommendations For Cisco Meeting Server versions prior to 2.0.3, update to Release 2.0.3 or later. For Acano Server versions 1.8.x prior to 1.8.17, update to Release 1.8.17 or later. For Acano Server versions 1.9.x prior to 1.9.5, update to Release 1.9.5 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾