PT-2017-2022 · Cisco · Cisco Telepresence Mcu

Publicado 2017-02-01 · Atualizado 2017-07-26 · CVE-2017-3792

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco TelePresence MCU platforms versions 4.3(1.68) or later

Description A vulnerability in the kernel of Cisco TelePresence Multipoint Control Unit (MCU) Software could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. The issue is due to improper size validation when reassembling fragmented IPv4 or IPv6 packets. An attacker could exploit this by sending crafted IPv4 or IPv6 fragments to a port receiving content in Passthrough content mode, potentially overflowing a buffer and allowing the execution of arbitrary code or causing a DoS condition.

Recommendations For Cisco TelePresence MCU platforms version 4.3(1.68) or later, update to the latest software version that addresses this vulnerability. As a temporary mitigation, consider restricting the use of Passthrough content mode until a patch is applied. Additionally, apply available mitigations as recommended by Cisco to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2017-01189

CVE-2017-3792

Produtos afetados

Cisco Telepresence Mcu

Referências · 6

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170125-telepresence · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2017-01189 · Nota de Segurança
• http://securityfocus.com/bid/95787 · Nota
• https://osv.dev/vulnerability/CVE-2017-3792 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-3792 · Nota de Segurança
• http://securitytracker.com/id/1037698 · Nota