Improper Input Validation in Pexip Infinity Affects Remote Users
CVE-2023-31455

7.5HIGH

Key Information:

Vendor

Pexip

Status
Pexip Infinity
Vendor
CVE Published:
25 December 2023

What is CVE-2023-31455?

Pexip Infinity prior to version 31.2 is susceptible to an improper input validation vulnerability related to Real-Time Control Protocol (RTCP). This weakness allows remote attackers to potentially exploit the system, leading to abnormal termination or an abort. Organizations utilizing affected versions should evaluate their systems promptly and consider applying the necessary updates to mitigate any potential risks.

References

https://docs.pexip.com/admin/security_bulletins.htm

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2023-31455 : Improper Input Validation in Pexip Infinity Affects Remote Users