CVE-2018-10585: 
Pexip Infinity Management Node vulnerability analysis and mitigation

CVE-2018-10585 affects Pexip Infinity versions before 18, allowing remote Denial of Service through XML parsing vulnerabilities. The vulnerability was disclosed and addressed in 2018, impacting the Pexip Infinity conferencing platform (NVD, Pexip Security).

The vulnerability has a CVSS v3.1 base score of 7.5 (HIGH) with a vector string of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. This indicates a network-accessible vulnerability requiring low attack complexity with no privileges or user interaction needed. The impact is limited to availability, with no impact on confidentiality or integrity (NVD).

The vulnerability allows remote attackers to cause a denial of service condition through malformed XML parsing. This could result in service disruption of the Pexip Infinity platform, affecting video conferencing capabilities (NVD).

The vulnerability is remotely exploitable without requiring authentication or user interaction. The low attack complexity suggests that exploitation is straightforward once the vulnerability is understood (NVD).

The primary mitigation is to upgrade Pexip Infinity to version 18 or later. No alternative workarounds were published for this vulnerability (Pexip Security).