Read the docs
TI-2017-04547 Aliases CVE-2017-6794GHSA-6929-fmg8-wwgh

Improper input validation in Cisco Meeting Server

Priority LOW 31CWE-20Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-77.

Summary

A vulnerability in the CLI command-parsing code of Cisco Meeting Server could allow an authenticated, local attacker to perform command injection and escalate their privileges to root. The attacker must first authenticate to the application with valid administrator credentials. The vulnerability is due to insufficient validation of user-supplied input at the CLI for certain commands. An attacker could exploit this vulnerability by authenticating to the affected application and submitting a crafted CLI command for execution at the Cisco Meeting Server CLI. An exploit could allow the attacker to perform command injection and escalate their privilege level to root. Vulnerable Products: This vulnerability exists in Cisco Meeting Server software versions prior to and including 2.0, 2.1, and 2.2. Cisco Bug IDs: CSCvf53830.

Why it matters now

EPSS 0.00841 58th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Cisco Meeting ServerCisco Meeting Server—No fix listedCNA
  • Cisco Meeting Server Vendor— Affected Cisco Meeting Server Fixed in — No fix listed CNA

CPE configurations NVD · 30

CPEVersionsRoleVendor
cpe:2.3:a:cisco:meeting_server:2.0.0:*:*:*:*:*:*:*2.0.0VulnerableCisco
cpe:2.3:a:cisco:meeting_server:2.0.1:*:*:*:*:*:*:*2.0.1VulnerableCisco
cpe:2.3:a:cisco:meeting_server:2.0.2:*:*:*:*:*:*:*2.0.2VulnerableCisco
cpe:2.3:a:cisco:meeting_server:2.0.3:*:*:*:*:*:*:*2.0.3VulnerableCisco
cpe:2.3:a:cisco:meeting_server:2.0.4:*:*:*:*:*:*:*2.0.4VulnerableCisco
cpe:2.3:a:cisco:meeting_server:2.0.5:*:*:*:*:*:*:*2.0.5VulnerableCisco
cpe:2.3:a:cisco:meeting_server:2.0.6:*:*:*:*:*:*:*2.0.6VulnerableCisco
cpe:2.3:a:cisco:meeting_server:2.0.7:*:*:*:*:*:*:*2.0.7VulnerableCisco
cpe:2.3:a:cisco:meeting_server:2.0.8:*:*:*:*:*:*:*2.0.8VulnerableCisco
cpe:2.3:a:cisco:meeting_server:2.0.9:*:*:*:*:*:*:*2.0.9VulnerableCisco
  • cpe:2.3:a:cisco:meeting_server:2.0.0:*:*:*:*:*:*:* Versions 2.0.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:meeting_server:2.0.1:*:*:*:*:*:*:* Versions 2.0.1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:meeting_server:2.0.2:*:*:*:*:*:*:* Versions 2.0.2 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:meeting_server:2.0.3:*:*:*:*:*:*:* Versions 2.0.3 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:meeting_server:2.0.4:*:*:*:*:*:*:* Versions 2.0.4 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:meeting_server:2.0.5:*:*:*:*:*:*:* Versions 2.0.5 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:meeting_server:2.0.6:*:*:*:*:*:*:* Versions 2.0.6 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:meeting_server:2.0.7:*:*:*:*:*:*:* Versions 2.0.7 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:meeting_server:2.0.8:*:*:*:*:*:*:* Versions 2.0.8 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:meeting_server:2.0.9:*:*:*:*:*:*:* Versions 2.0.9 Vulnerable ·Cisco
Show 20 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:cisco:meeting_server:2.0.10:*:*:*:*:*:*:*2.0.10VulnerableCisco
cpe:2.3:a:cisco:meeting_server:2.0.11:*:*:*:*:*:*:*2.0.11VulnerableCisco
cpe:2.3:a:cisco:meeting_server:2.0.12:*:*:*:*:*:*:*2.0.12VulnerableCisco
cpe:2.3:a:cisco:meeting_server:2.0.13:*:*:*:*:*:*:*2.0.13VulnerableCisco
cpe:2.3:a:cisco:meeting_server:2.0.14:*:*:*:*:*:*:*2.0.14VulnerableCisco
cpe:2.3:a:cisco:meeting_server:2.0.15:*:*:*:*:*:*:*2.0.15VulnerableCisco
cpe:2.3:a:cisco:meeting_server:2.0.16:*:*:*:*:*:*:*2.0.16VulnerableCisco
cpe:2.3:a:cisco:meeting_server:2.1.0:*:*:*:*:*:*:*2.1.0VulnerableCisco
cpe:2.3:a:cisco:meeting_server:2.1.1:*:*:*:*:*:*:*2.1.1VulnerableCisco
cpe:2.3:a:cisco:meeting_server:2.1.2:*:*:*:*:*:*:*2.1.2VulnerableCisco
cpe:2.3:a:cisco:meeting_server:2.1.3:*:*:*:*:*:*:*2.1.3VulnerableCisco
cpe:2.3:a:cisco:meeting_server:2.1.4:*:*:*:*:*:*:*2.1.4VulnerableCisco
cpe:2.3:a:cisco:meeting_server:2.1.5:*:*:*:*:*:*:*2.1.5VulnerableCisco
cpe:2.3:a:cisco:meeting_server:2.1.6:*:*:*:*:*:*:*2.1.6VulnerableCisco
cpe:2.3:a:cisco:meeting_server:2.1.7:*:*:*:*:*:*:*2.1.7VulnerableCisco
cpe:2.3:a:cisco:meeting_server:2.1.8:*:*:*:*:*:*:*2.1.8VulnerableCisco
cpe:2.3:a:cisco:meeting_server:2.1.9:*:*:*:*:*:*:*2.1.9VulnerableCisco
cpe:2.3:a:cisco:meeting_server:2.1.10:*:*:*:*:*:*:*2.1.10VulnerableCisco
cpe:2.3:a:cisco:meeting_server:2.1.11:*:*:*:*:*:*:*2.1.11VulnerableCisco
cpe:2.3:a:cisco:meeting_server:2.2.0:*:*:*:*:*:*:*2.2.0VulnerableCisco
  • cpe:2.3:a:cisco:meeting_server:2.0.10:*:*:*:*:*:*:* Versions 2.0.10 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:meeting_server:2.0.11:*:*:*:*:*:*:* Versions 2.0.11 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:meeting_server:2.0.12:*:*:*:*:*:*:* Versions 2.0.12 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:meeting_server:2.0.13:*:*:*:*:*:*:* Versions 2.0.13 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:meeting_server:2.0.14:*:*:*:*:*:*:* Versions 2.0.14 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:meeting_server:2.0.15:*:*:*:*:*:*:* Versions 2.0.15 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:meeting_server:2.0.16:*:*:*:*:*:*:* Versions 2.0.16 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:meeting_server:2.1.0:*:*:*:*:*:*:* Versions 2.1.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:meeting_server:2.1.1:*:*:*:*:*:*:* Versions 2.1.1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:meeting_server:2.1.2:*:*:*:*:*:*:* Versions 2.1.2 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:meeting_server:2.1.3:*:*:*:*:*:*:* Versions 2.1.3 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:meeting_server:2.1.4:*:*:*:*:*:*:* Versions 2.1.4 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:meeting_server:2.1.5:*:*:*:*:*:*:* Versions 2.1.5 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:meeting_server:2.1.6:*:*:*:*:*:*:* Versions 2.1.6 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:meeting_server:2.1.7:*:*:*:*:*:*:* Versions 2.1.7 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:meeting_server:2.1.8:*:*:*:*:*:*:* Versions 2.1.8 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:meeting_server:2.1.9:*:*:*:*:*:*:* Versions 2.1.9 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:meeting_server:2.1.10:*:*:*:*:*:*:* Versions 2.1.10 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:meeting_server:2.1.11:*:*:*:*:*:*:* Versions 2.1.11 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:meeting_server:2.2.0:*:*:*:*:*:*:* Versions 2.2.0 Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-6794
  2. 2026-10-03 Alias added: GHSA-6929-fmg8-wwgh

References

Advisory 1

  • TI-2016-05530 Memory corruption in Cisco Meeting Server before 2.0.3 and Acano Server before 1.9.5 CVSS 3.0CRITICAL 9.8
  • TI-2016-05529 Memory corruption in Cisco Meeting Server before 2.0.1, Acano Server before 1.9.3, Cisco… CVSS 3.0CRITICAL 9.8
  • TI-2018-00239 Improper input validation in Cisco Meeting Server Media Services CVSS 3.0HIGH 7.5
  • TI-2017-09025 Exposure of resource to wrong sphere in Cisco Meeting Server CVSS 3.0CRITICAL 9.1
  • TI-2018-00222 A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker… CVSS 3.0HIGH 8.1
  • TI-2016-05527 Improper input validation in Cisco Meeting Server before 2.0.6 and Acano Server before… CVSS 3.0CRITICAL 9.1
See all 30 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences