Vulnerability Details : CVE-2017-6745
A vulnerability in the cache server within Cisco Videoscape Distribution Suite (VDS) for Television 3.2(5)ES1 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on a targeted appliance. The vulnerability is due to excessive mapped connections exhausting the allotted resources within the system. An attacker could exploit this vulnerability by sending large amounts of inbound traffic to a device with the intention of overloading certain resources. A successful exploit could cause the device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc39260.
Vulnerability category: OverflowDenial of service
Products affected by CVE-2017-6745
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.3\(1\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:4.2\(1\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.4\(1\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.5\(1\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.6\(1\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.9\(1\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.2\(7\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.4\(2\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:4.1\(3\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.2\(6\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:4.1\(2\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.8\(1\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:4.1\(5\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.5\(1\)-cos:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.2\(5\)es1:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:4.1\(4\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:4.4\(1\):*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2017-6745
0.48%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 63 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2017-6745
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
7.8
|
HIGH | AV:N/AC:L/Au:N/C:N/I:N/A:C |
10.0
|
6.9
|
NIST | |
7.5
|
HIGH | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
3.9
|
3.6
|
NIST |
CWE ids for CVE-2017-6745
-
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.Assigned by:
- nvd@nist.gov (Primary)
- ykramarz@cisco.com (Secondary)
References for CVE-2017-6745
-
http://www.securityfocus.com/bid/100106
Cisco Videoscape Distribution Suite for Television CVE-2017-6745 Denial of Service VulnerabilityThird Party Advisory;VDB Entry
-
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-vds
Cisco Videoscape Distribution Suite Cache Server Denial of Service VulnerabilityVendor Advisory
Jump to