PT-2015-4858 · Cisco · Cisco Dta Control System+1

Published 2015-05-30 · Updated 2017-01-04 · CVE-2015-0744

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco DTA Control System (DTACS) version 4.0.0.9 Cisco Headend System Release (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service, resulting in CPU and memory consumption, and TCP service outage. This can be achieved via a SYN flood or another type of TCP traffic flood.

Recommendations For Cisco DTA Control System (DTACS) version 4.0.0.9, consider implementing traffic filtering to restrict excessive TCP connections. For Cisco Headend System Release, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2015-0744

Affected Products

Cisco Dta Control System

Cisco Headend System Release

References · 4

• http://tools.cisco.com/security/center/viewAlert.x?alertId=38943 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-0744 · Security Note
• http://securityfocus.com/bid/74916 · Note
• http://securitytracker.com/id/1032445 · Note