PT-2017-17323 · Cisco · Cisco Telepresence Video Communication Server

Published 2017-08-17 · Updated 2019-10-03 · CVE-2017-6790

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server (VCS) (affected versions not specified)

Description A vulnerability in the Session Initiation Protocol (SIP) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the targeted appliance. The issue is due to excessive SIP traffic sent to the device. An attacker could exploit this by transmitting large volumes of SIP traffic to the VCS, potentially causing a complete DoS condition on the targeted system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2017-6790

Affected Products

Cisco Telepresence Video Communication Server

References · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-vcs · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-6790 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-6790 · Security Note
• http://securityfocus.com/bid/100369 · Note
• http://securitytracker.com/id/1039185 · Note