CVE-2020-3197

CVE-2020-3197 is a medium-severity vulnerability in the API subsystem of Cisco Meeting Server that allows an unauthenticated, remote attacker to intercept and reuse Traversal Using Relay NAT (TURN) server credentials. The vulnerability stems from insufficient protection of these credentials, enabling an attacker to obtain them and potentially place audio/video calls or forward packets through the TURN server. While the attacker cannot control the TURN server itself, the impact is a loss of confidentiality regarding the TURN credentials. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.