PT-2017-17218 · Cisco · Cisco Identity Services Engine

Publicado 2017-05-22 · Atualizado 2019-10-03 · CVE-2017-6653

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine (ISE) version 2.1(0.474)

Description A denial of service (DoS) condition can occur on an affected device due to insufficient TCP rate limiting protection on the GUI, allowing an unauthenticated, remote attacker to cause the ISE GUI to fail to respond to new or established connection requests. This can be exploited by sending a high rate of TCP connections to the GUI, causing it to stop responding while the high rate of connections is in progress.

Recommendations For Cisco Identity Services Engine (ISE) version 2.1(0.474), consider implementing rate limiting on TCP connections to the GUI as a temporary workaround until a patch is available. Restrict access to the GUI to minimize the risk of exploitation.

Correção

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-770

CWE-399

Identificadores relacionados

CVE-2017-6653

Produtos afetados

Cisco Identity Services Engine

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-6653 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-6653 · Aviso do Fabricante
• http://securitytracker.com/id/1038516 · Nota
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-ise · Aviso do Fabricante
• http://securityfocus.com/bid/98536 · Nota