CVEvulnerability
CVE-2016-6447
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2016-11-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
A vulnerability in Cisco Meeting Server and Meeting App could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. This vulnerability affects the following products: Cisco Meeting Server releases prior to 2.0.1, Acano Server releases prior to 1.8.16 and prior to 1.9.3, Cisco Meeting App releases prior to 1.9.8, Acano Meeting Apps releases prior to 1.8.35. More Information: CSCva75942 CSCvb67878. Known Affected Releases: 1.81.92.0.
Affected configurations
• cisco meeting app 1.8.0
• cisco meeting app 1.9.0
• cisco meeting server 1.8 base
• cisco meeting server 1.9.0
• cisco meeting server 2.0.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://www.securityfocus.com/bid/94073 www.securityfocus.com
- http://www.securitytracker.com/id/1037180 www.securitytracker.com
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161102-cms Vendor Advisory
- http://www.securityfocus.com/bid/94073 www.securityfocus.com
- http://www.securitytracker.com/id/1037180 www.securitytracker.com
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161102-cms Vendor Advisory