Vulnerability Details : CVE-2020-16139

Public exploit exists!
A denial-of-service in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers restart the device remotely through sending specially crafted packets. Note: We cannot prove this vulnerability exists. Out of an abundance of caution, this CVE is being assigned to better serve our customers and ensure all who are still running this product understand that the product is end of life and should be removed or upgraded. For more information on this, and how to upgrade, refer to the CVE’s reference information
Published 2020-08-12 21:15:12
Updated 2024-08-04 14:15:32
Source MITRE
View at NVD,   CVE.org
Vulnerability category: Denial of service

Products affected by CVE-2020-16139

Exploit prediction scoring system (EPSS) score for CVE-2020-16139

EPSS FAQ
88.18%
Probability of exploitation activity in the next 30 days EPSS Score History
~ 99 %
Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2020-16139

  • Cisco 7937G Denial-of-Service Reboot Attack
    Disclosure Date: 2020-06-02
    First seen: 2020-08-21
    auxiliary/dos/cisco/cisco_7937g_dos_reboot
    This module exploits a bug in how the conference station handles executing a ping via its web interface. By repeatedly executing the ping function without clearing out the resulting output, a DoS is caused that will reset the device after a few minutes. Authors: - Cody Martin

CVSS scores for CVE-2020-16139

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source First Seen
7.8
 HIGH AV:N/AC:L/Au:N/C:N/I:N/A:C
10.0
6.9
 NIST
7.5
 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
3.9
3.6
 NIST

References for CVE-2020-16139

Jump to
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close