CVE-2017-6790
Description
A vulnerability in the Session Initiation Protocol (SIP) on the Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the targeted appliance. The vulnerability is due to excessive SIP traffic sent to the device. An attacker could exploit this vulnerability by transmitting large volumes of SIP traffic to the VCS. An exploit could allow the attacker to cause a complete DoS condition on the targeted system. Cisco Bug IDs: CSCve32897.
Risk Information
Base Score
6.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
EPSS Score
Exploitation Probability
1.795
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Cisco TelePresence Video Communication Server Denial of Service Vulnerability For Cisco TelePresence Video Communication Server Software | NCM |
| CVE-2017-6790 | NCM |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-1706044 | Security Update for Cisco TelePresence Video Communication Server Software X8.9.2 |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234