CVE-2017-6745

HIGH

Cisco Videoscape Distribution Suite for Television 3.2(5)ES1 - Unauthenticated Denial of Service via Resource Exhaustion

Title source: llm
STIX 2.1

Description

A vulnerability in the cache server within Cisco Videoscape Distribution Suite (VDS) for Television 3.2(5)ES1 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on a targeted appliance. The vulnerability is due to excessive mapped connections exhausting the allotted resources within the system. An attacker could exploit this vulnerability by sending large amounts of inbound traffic to a device with the intention of overloading certain resources. A successful exploit could cause the device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc39260.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/100106

Scores

CVSS v3 7.5
EPSS 0.0174
EPSS Percentile 74.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-119
Status published
Products (18)
cisco/videoscape_distribution_suite_for_television 3.2\(5\)es1
cisco/videoscape_distribution_suite_for_television 3.2\(6\)
cisco/videoscape_distribution_suite_for_television 3.2\(7\)
cisco/videoscape_distribution_suite_for_television 3.3\(1\)
cisco/videoscape_distribution_suite_for_television 3.4\(1\)
cisco/videoscape_distribution_suite_for_television 3.4\(2\)
cisco/videoscape_distribution_suite_for_television 3.5\(1\)
cisco/videoscape_distribution_suite_for_television 3.5\(1\)-cos
cisco/videoscape_distribution_suite_for_television 3.6\(1\)
cisco/videoscape_distribution_suite_for_television 3.8\(1\)
... and 8 more
Published Aug 07, 2017
Tracked Since Feb 18, 2026