A vulnerability in the reclaim host role feature of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an authenticated, remote attacker to take over the host role during a meeting. This vulnerability is due to a lack of protection against brute forcing of the host key. An attacker could exploit this vulnerability by sending crafted requests to a vulnerable Cisco Webex Meetings or Webex Meetings Server site. A successful exploit would require the attacker to have access to join a Webex meeting, including applicable meeting join links and passwords. A successful exploit could allow the attacker to acquire or take over the host role for a meeting.
Published 2021-01-13 22:15:22
Updated 2021-01-20 16:12:30
View at NVD,   CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2021-1311

Probability of exploitation activity in the next 30 days: 0.10%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 40 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2021-1311

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source
5.5
MEDIUM AV:N/AC:L/Au:S/C:N/I:P/A:P
8.0
4.9
NIST
5.4
MEDIUM CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
2.8
2.5
Cisco Systems, Inc.
5.4
MEDIUM CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
2.8
2.5
NIST

CWE ids for CVE-2021-1311

References for CVE-2021-1311

Products affected by CVE-2021-1311

This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!