CVE-2020-3471
CVE-2020-3471 is a medium-severity vulnerability in Cisco Webex Meetings Server with a CVSS 3.x base score of 6.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-662.
Key facts
- Severity: Medium (CVSS 3.x base score 6.5)
- CVSS v2: 5.0
- EPSS exploit prediction: 2% (75th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-662
- Affected product: Cisco Webex Meetings Server
- Published:
- Last modified:
Description
A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to maintain bidirectional audio despite being expelled from an active Webex session. The vulnerability is due to a synchronization issue between meeting and media services on a vulnerable Webex site. An attacker could exploit this vulnerability by sending crafted requests to a vulnerable Cisco Webex Meetings or Cisco Webex Meetings Server site. A successful exploit could allow the attacker to maintain the audio connection of a Webex session despite being expelled.
Frequently asked questions
- What is CVE-2020-3471?
- A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to maintain bidirectional audio despite being expelled from an active Webex session. The vulnerability is due to a synchronization issue between meeting and media services on a vulnerable Webex site. An attacker could exploit this vulnerability by sending crafted requests to a vulnerable Cisco Webex Meetings or Cisco Webex Meetings Server site. A successful exploit could allow the attacker to maintain the audio connection of a Webex session despite being expelled.
- How severe is CVE-2020-3471?
- CVE-2020-3471 has a CVSS 3.x base score of 6.5, rated medium severity. It is exploitable over network with low attack complexity, requires no privileges and user interaction. Impact on confidentiality is high, integrity none, and availability none.
- Is CVE-2020-3471 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (75th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2020-3471?
- CVE-2020-3471 primarily affects Cisco Webex Meetings Server. In total, 6 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2020-3471?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2020-3471 published?
- CVE-2020-3471 was published on 2020-11-18 and last updated on 2026-06-17.
References
Affected products (6)
- cpe:2.3:a:cisco:webex_meetings_server:*:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release2:*:*:*:*:*:*
- cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release3:*:*:*:*:*:*
- cpe:2.3:a:cisco:webex_meetings_server:4.0:-:*:*:*:*:*:*
- cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release1:*:*:*:*:*:*
- cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release2:*:*:*:*:*:*
More vulnerabilities in Cisco Webex Meetings Server
- CVE-2021-44228 — Critical (CVSS 10.0): Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in…
- CVE-2018-0104 — Critical (CVSS 9.6): A vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow a remote…
- CVE-2017-12372 — Critical (CVSS 9.6): A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording…
- CVE-2017-12368 — Critical (CVSS 9.6): A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording…
- CVE-2017-12367 — Critical (CVSS 9.6): A "Cisco WebEx Network Recording Player Denial of Service Vulnerability" exists in Cisco WebEx Network Recording Player…
- CVE-2018-0112 — Critical (CVSS 9.0): A vulnerability in Cisco WebEx Business Suite clients, Cisco WebEx Meetings, and Cisco WebEx Meetings Server could…
All CVEs affecting Cisco Webex Meetings Server →
Other CWE-662 vulnerabilities
- CVE-2018-15555 — Critical (CVSS 9.8): On Telus Actiontec WEB6000Q v1.1.02.22 devices, an attacker can login with root level access with the user "root" and…
- CVE-2024-32644 — Critical (CVSS 9.1): Evmos is a scalable, high-throughput Proof-of-Stake EVM blockchain that is fully compatible and interoperable with…
- CVE-2026-53277 — High (CVSS 8.8): In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Take the SRCU lock for page table…
- CVE-2022-23005 — High (CVSS 8.7): Western Digital has identified a weakness in the UFS standard that could result in a security vulnerability. This…
- CVE-2016-8368 — High (CVSS 8.6): An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all…
- CVE-2022-1931 — High (CVSS 8.1): Incorrect Synchronization in GitHub repository polonel/trudesk prior to 1.2.3.