Cisco Meeting Server CVE-2017-6794 Local Command Injection and Privilege Escalation Vulnerabilities

Bugtraq ID:	100464
Class:	Unknown
CVE:	CVE-2017-6794
Remote:	No
Local:	Yes
Published:	Aug 23 2017 12:00AM
Updated:	Aug 23 2017 12:00AM
Credit:	Cisco.
Vulnerable:	Cisco Meeting Server 2.0.7 Cisco Meeting Server 2.0.3 Cisco Meeting Server 2.0.2 Cisco Meeting Server 2.0.1 Cisco Meeting Server 2.2 Cisco Meeting Server 2.1 Cisco Meeting Server 2.0
Not Vulnerable:

Cisco Meeting Server CVE-2017-6794 Local Command Injection and Privilege Escalation Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Meeting Server CVE-2017-6794 Local Command Injection and Privilege Escalation Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Meeting Server CVE-2017-6794 Local Command Injection and Privilege Escalation Vulnerabilities

References:

• Cisco Homepage (Cisco)
  
• cisco-sa-20170823-cms:Cisco Meeting Server Command Injection and Privilege Escal (Cisco)