CVE-2016-6448

Critical

Published: 03/11/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A vulnerability in the SDP parser of Cisco Meeting Server could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. This affects versions prior to 2.0.3 and Acano Server versions 1.9.x prior to 1.9.5 and 1.8.x prior to 1.8.17.

Risk Assessment

An attacker could remotely take control of the system, potentially leading to serious security breaches and data loss.

Recommendation

It is recommended to update Cisco Meeting Server to version 2.0.3 or later and Acano Server to version 1.9.5 or 1.8.17 to mitigate the risk.

Original NVD description (English source)

A vulnerability in the Session Description Protocol (SDP) parser of Cisco Meeting Server could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. This vulnerability affects the following products: Cisco Meeting Server releases prior to Release 2.0.3, Acano Server releases 1.9.x prior to Release 1.9.5, Acano Server releases 1.8.x prior to Release 1.8.17. More Information: CSCva76004. Known Affected Releases: 1.8.x 1.92.0.