Denial of Service Vulnerability in Cisco Meeting Server Web Bridge

CVE-2023-20255

What is CVE-2023-20255?

A vulnerability within the API of the Web Bridge feature of Cisco Meeting Server allows unauthenticated remote attackers to disrupt service by exploiting insufficient validation of HTTP requests. By sending specially crafted HTTP packets to the affected device, an attacker can initiate a denial of service (DoS) condition. This could lead to interruptions in ongoing video calls, as the invalid packets cause instability within the Web Bridge, potentially dropping active connections and affecting overall service availability.

References