CVE-2017-12224

CVE-2017-12224 describes a vulnerability in Cisco Meeting Server where guest users could bypass intended access restrictions and join meetings via a hyperlink, even when guest access via hyperlinks was configured to be denied. The vulnerability stems from an incorrect implementation of this configuration setting. With a CVSS score of 6.5 (Medium), this flaw allows an authenticated, remote attacker to gain unauthorized access to meetings, potentially leading to information disclosure (C:H). While the attacker still requires a valid hyperlink and encoded secret identifier, the vulnerability circumvents the administrative control designed to prevent such access. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.