CVE-2017-6745

High

Description

A vulnerability in the cache server within Cisco Videoscape Distribution Suite (VDS) for Television 3.2(5)ES1 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on a targeted appliance. The vulnerability is due to excessive mapped connections exhausting the allotted resources within the system. An attacker could exploit this vulnerability by sending large amounts of inbound traffic to a device with the intention of overloading certain resources. A successful exploit could cause the device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc39260.

SeverityHigh
CVSS7.5
Exploit probability—
ProductCisco Videoscape Distribution Suite For Television
PublishedAug 7, 2017
First seenAug 7, 2017

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
cisco videoscape_distribution_suite_for_television3.2\(5\)es1, 3.2\(6\), 3.2\(7\), 3.3\(1\), 3.4\(1\), 3.4\(2\), 3.5\(1\), 3.5\(1\)-cos, 3.6\(1\), 3.8\(1\), 3.9\(1\), 4.1\(2\), 4.1\(3\), 4.1\(4\), 4.1\(5\), 4.2\(1\), 4.4\(1\)—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.