PT-2016-6921
CVE-2016-6448
·
Published
2016-11-03
·
Updated
2017-07-29
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Cisco Meeting Server versions prior to 2.0.3
Acano Server versions 1.8.x prior to 1.8.17
Acano Server versions 1.9.x prior to 1.9.5
Description
A vulnerability in the Session Description Protocol (SDP) parser could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system.
Recommendations
For Cisco Meeting Server versions prior to 2.0.3, update to Release 2.0.3 or later.
For Acano Server versions 1.8.x prior to 1.8.17, update to Release 1.8.17 or later.
For Acano Server versions 1.9.x prior to 1.9.5, update to Release 1.9.5 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾