CVE-2019-1623
Medium
Description
A vulnerability in the CLI configuration shell of Cisco Meeting Server could allow an authenticated, local attacker to inject arbitrary commands as the root user. The vulnerability is due to insufficient input validation during the execution of a vulnerable CLI command. An attacker with administrator-level credentials could exploit this vulnerability by injecting crafted arguments during command execution. A successful exploit could allow the attacker to perform arbitrary code execution as root on an affected product.
SeverityMedium
CVSS6.7
Exploit probability—
Product
Cisco Meeting Server
PublishedJun 20, 2019
First seenJun 20, 2019
Weakness typeCWE-77Command injection
How to fix
Update
- cisco meeting_server2.2.14, 2.3.8 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco meeting_server | 2.2.0 ≤ v < 2.2.14, 2.3.0 ≤ v < 2.3.8 | 2.2.14, 2.3.8 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.