Vulnerability Details : CVE-2020-16138

Public exploit exists!
A denial-of-service issue in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to remotely disable the device until it is power cycled. Note: We cannot prove this vulnerability exists. Out of an abundance of caution, this CVE is being assigned to better serve our customers and ensure all who are still running this product understand that the product is end of life and should be removed or upgraded. For more information on this, and how to upgrade, refer to the CVE’s reference information
Published 2020-08-12 21:15:12
Updated 2024-08-04 14:15:32
Source MITRE
View at NVD,   CVE.org
Vulnerability category: Denial of service

Products affected by CVE-2020-16138

Exploit prediction scoring system (EPSS) score for CVE-2020-16138

EPSS FAQ
8.67%
Probability of exploitation activity in the next 30 days EPSS Score History
~ 95 %
Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2020-16138

  • Cisco 7937G Denial-of-Service Attack
    Disclosure Date: 2020-06-02
    First seen: 2020-08-21
    auxiliary/dos/cisco/cisco_7937g_dos
    This module exploits a bug in how the conference station handles incoming SSH connections that provide an incompatible key exchange. By connecting with an incompatible key exchange, the device becomes nonresponsive until it is manually power cycled. Authors: - Cody Martin

CVSS scores for CVE-2020-16138

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source First Seen
7.8
 HIGH AV:N/AC:L/Au:N/C:N/I:N/A:C
10.0
6.9
 NIST
7.5
 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
3.9
3.6
 NIST

References for CVE-2020-16138

Jump to
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close