PT-2017-2022 · Cisco · Cisco Telepresence Mcu

Published 2017-02-01 · Updated 2017-07-26 · CVE-2017-3792

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco TelePresence MCU platforms versions 4.3(1.68) or later

Description A vulnerability in the kernel of Cisco TelePresence Multipoint Control Unit (MCU) Software could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. The issue is due to improper size validation when reassembling fragmented IPv4 or IPv6 packets. An attacker could exploit this by sending crafted IPv4 or IPv6 fragments to a port receiving content in Passthrough content mode, potentially overflowing a buffer and allowing the execution of arbitrary code or causing a DoS condition.

Recommendations For Cisco TelePresence MCU platforms version 4.3(1.68) or later, update to the latest software version that addresses this vulnerability. As a temporary mitigation, consider restricting the use of Passthrough content mode until a patch is applied. Additionally, apply available mitigations as recommended by Cisco to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2017-01189

CVE-2017-3792

Affected Products

Cisco Telepresence Mcu

References · 6

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170125-telepresence · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-01189 · Security Note
• https://osv.dev/vulnerability/CVE-2017-3792 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-3792 · Security Note
• http://securityfocus.com/bid/95787 · Note
• http://securitytracker.com/id/1037698 · Note