CVE-2016-6447

Description

A vulnerability in Cisco Meeting Server and Meeting App could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. This vulnerability affects the following products: Cisco Meeting Server releases prior to 2.0.1, Acano Server releases prior to 1.8.16 and prior to 1.9.3, Cisco Meeting App releases prior to 1.9.8, Acano Meeting Apps releases prior to 1.8.35. More Information: CSCva75942 CSCvb67878. Known Affected Releases: 1.81.92.0.

Risk Information

Base Score
9.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
7.588

Associated Vulnerability

VulnerabilityOS Platform
Cisco Meeting Server and Meeting App Buffer Underflow Vulnerability For Cisco Meeting AppNCM
Cisco Meeting Server and Meeting App Buffer Underflow Vulnerability For Cisco Meeting ServerNCM
Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-6447)NCM

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-1705999Security Update for Cisco Meeting App 1.9.8
PATCH-1701407Security Update for Cisco Meeting Server 3.1.2

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234