PT-2017-17207 · Cisco · Cisco Remote Expert Manager

Published 2017-05-22 · Updated 2019-10-09 · CVE-2017-6641

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Remote Expert Manager Software version 11.0.0

Description A vulnerability in the TCP connection handling functionality could allow an unauthenticated, remote attacker to disable TCP ports and cause a denial of service (DoS) condition on an affected system. The issue is due to a lack of rate-limiting functionality in the TCP Listen application. An attacker could exploit this by sending a crafted TCP traffic stream, such as a stream with the TCP FIN bit set in all packets, to flood an affected device. A successful exploit could cause certain TCP listening ports to stop accepting incoming connections for a period or until the device is restarted, resulting in a DoS condition. System resources like CPU and memory could also be exhausted during the attack.

Recommendations For Cisco Remote Expert Manager Software version 11.0.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

CWE-399

Related Identifiers

CVE-2017-6641

Affected Products

Cisco Remote Expert Manager

References · 4

• https://osv.dev/vulnerability/CVE-2017-6641 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-6641 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-rem1 · Vendor Advisory
• http://securityfocus.com/bid/98532 · Note