PT-2015-4858 · Cisco · Cisco Dta Control System+1

Publicado 2015-05-30 · Atualizado 2017-01-04 · CVE-2015-0744

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco DTA Control System (DTACS) version 4.0.0.9 Cisco Headend System Release (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service, resulting in CPU and memory consumption, and TCP service outage. This can be achieved via a SYN flood or another type of TCP traffic flood.

Recommendations For Cisco DTA Control System (DTACS) version 4.0.0.9, consider implementing traffic filtering to restrict excessive TCP connections. For Cisco Headend System Release, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2015-0744

Produtos afetados

Cisco Dta Control System

Cisco Headend System Release

Referências · 4

• http://tools.cisco.com/security/center/viewAlert.x?alertId=38943 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-0744 · Nota de Segurança
• http://securityfocus.com/bid/74916 · Nota
• http://securitytracker.com/id/1032445 · Nota