TI-2018-00222 Aliases CVE-2018-0262 GHSA-jr24-4pv3-cjgv

A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker…

MEDIUM 44CWE-16Published 2018-05-02 · Updated 2024-11-29

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: High
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to gain unauthorized access to components of, or sensitive information in, an affected system, leading to Remote Code Execution. The vulnerability is due to incorrect default configuration of the device, which can expose internal interfaces and ports on the external interface of the system. A successful exploit could allow the attacker to gain unauthenticated access to configuration and database files as well as sensitive meeting information on an affected system. Additionally, if the Traversal Using Relay NAT (TURN) service is enabled and utilizing Transport Layer Security (TLS) connections, an attacker could utilize TURN credentials to forward traffic to device daemons, allowing for remote exploitation. This vulnerability affects Cisco Meeting Server (CMS) Acano X-series platforms that are running a CMS Software release prior to 2.2.11. Cisco Bug IDs: CSCvg76469.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.03942 90th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	Cisco Meeting Server	Cisco Meeting Server	—	No fix listed	CNA

Cisco Meeting Server Vendor— Affected Cisco Meeting Server Fixed in — No fix listed CNA

CPE configurations NVD · 6

CPE	Versions	Role	Vendor
cpe:2.3:a:cisco:meeting_server:1.9:::::::*	1.9	Vulnerable	Cisco
cpe:2.3:a:cisco:meeting_server:2.0:::::::*	2.0	Vulnerable	Cisco
cpe:2.3:a:cisco:meeting_server:2.1:::::::*	2.1	Vulnerable	Cisco
cpe:2.3:a:cisco:meeting_server:2.2:::::::*	2.2	Vulnerable	Cisco
cpe:2.3:a:cisco:meeting_server:2.3:::::::*	2.3	Vulnerable	Cisco
cpe:2.3:a:cisco:meeting_server:2.4:::::::*	2.4	Vulnerable	Cisco

cpe:2.3:a:cisco:meeting_server:1.9:*:*:*:*:*:*:* Versions 1.9 Vulnerable ·Cisco
cpe:2.3:a:cisco:meeting_server:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Cisco
cpe:2.3:a:cisco:meeting_server:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·Cisco
cpe:2.3:a:cisco:meeting_server:2.2:*:*:*:*:*:*:* Versions 2.2 Vulnerable ·Cisco
cpe:2.3:a:cisco:meeting_server:2.3:*:*:*:*:*:*:* Versions 2.3 Vulnerable ·Cisco
cpe:2.3:a:cisco:meeting_server:2.4:*:*:*:*:*:*:* Versions 2.4 Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2018-0262
2026-10-03 Alias added: GHSA-jr24-4pv3-cjgv

References

Advisory 1

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180502-cms-cx

TI-2016-05530 Memory corruption in Cisco Meeting Server before 2.0.3 and Acano Server before 1.9.5 CVSS 3.0CRITICAL 9.8
TI-2016-05529 Memory corruption in Cisco Meeting Server before 2.0.1, Acano Server before 1.9.3, Cisco… CVSS 3.0CRITICAL 9.8
TI-2018-00239 Improper input validation in Cisco Meeting Server Media Services CVSS 3.0HIGH 7.5
TI-2017-09025 Exposure of resource to wrong sphere in Cisco Meeting Server CVSS 3.0CRITICAL 9.1
TI-2016-05527 Improper input validation in Cisco Meeting Server before 2.0.6 and Acano Server before… CVSS 3.0CRITICAL 9.1
TI-2018-11006 Cisco Meeting Server Information Disclosure Vulnerability CVSS 3.0HIGH 7.5

See all 30 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences