PT-2017-17323 · Cisco · Cisco Telepresence Video Communication Server

Publicado 2017-08-17 · Atualizado 2019-10-03 · CVE-2017-6790

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server (VCS) (affected versions not specified)

Description A vulnerability in the Session Initiation Protocol (SIP) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the targeted appliance. The issue is due to excessive SIP traffic sent to the device. An attacker could exploit this by transmitting large volumes of SIP traffic to the VCS, potentially causing a complete DoS condition on the targeted system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2017-6790

Produtos afetados

Cisco Telepresence Video Communication Server

Referências · 5

• http://securityfocus.com/bid/100369 · Nota
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-vcs · Aviso do Fabricante
• http://securitytracker.com/id/1039185 · Nota
• https://osv.dev/vulnerability/CVE-2017-6790 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-6790 · Nota de Segurança