CVE-2020-3160

Cisco Meeting Server Extensible Messaging and Presence Protocol Denial of Service Vulnerability

State: Published
Severity: 5.3 Medium
Published: Feb 19, 2020
Updated: Nov 15, 2024
Reserved: Dec 12, 2019

Description

A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) feature of Cisco Meeting Server software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition for users of XMPP conferencing applications. Other applications and processes are unaffected. The vulnerability is due to improper input validation of XMPP packets. An attacker could exploit this vulnerability by sending crafted XMPP packets to an affected device. An exploit could allow the attacker to cause process crashes and a DoS condition for XMPP conferencing applications.

Scores

CVSS	Score	Vector	Source
3.0	5.3 Medium	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L	cisco

Weaknesses

CWE-20

Affected Products

Product	Versions
Cisco Meeting ServerCisco	before n/aAffected

References

20200219 Cisco Meeting Server Extensible Messaging and Presence Protocol Denial of Service Vulnerabilityvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.