CVE-2017-6745
Last modified
CVE-2017-6745 is a vulnerability of currently unknown severity. A vulnerability in the cache server within Cisco Videoscape Distribution Suite (VDS) for Television 3.2(5)ES1 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on a targeted appliance. The vulnerability is due to excessive mapped connections exhausting the allotted resources within the system. EPSS estimates a 1.74% chance of exploitation in the next 30 days.
Description
A vulnerability in the cache server within Cisco Videoscape Distribution Suite (VDS) for Television 3.2(5)ES1 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on a targeted appliance. The vulnerability is due to excessive mapped connections exhausting the allotted resources within the system. An attacker could exploit this vulnerability by sending large amounts of inbound traffic to a device with the intention of overloading certain resources. A successful exploit could cause the device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc39260.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Videoscape Distribution Suite For Television | 3.2\(5\)es1 |
| Cisco | Videoscape Distribution Suite For Television | 3.2\(6\) |
| Cisco | Videoscape Distribution Suite For Television | 3.2\(7\) |
| Cisco | Videoscape Distribution Suite For Television | 3.3\(1\) |
| Cisco | Videoscape Distribution Suite For Television | 3.4\(1\) |
| Cisco | Videoscape Distribution Suite For Television | 3.4\(2\) |
| Cisco | Videoscape Distribution Suite For Television | 3.5\(1\) |
| Cisco | Videoscape Distribution Suite For Television | 3.5\(1\)-cos |
| Cisco | Videoscape Distribution Suite For Television | 3.6\(1\) |
| Cisco | Videoscape Distribution Suite For Television | 3.8\(1\) |
| Cisco | Videoscape Distribution Suite For Television | 3.9\(1\) |
| Cisco | Videoscape Distribution Suite For Television | 4.1\(2\) |
| Cisco | Videoscape Distribution Suite For Television | 4.1\(3\) |
| Cisco | Videoscape Distribution Suite For Television | 4.1\(4\) |
| Cisco | Videoscape Distribution Suite For Television | 4.1\(5\) |
| Cisco | Videoscape Distribution Suite For Television | 4.2\(1\) |
| Cisco | Videoscape Distribution Suite For Television | 4.4\(1\) |
References
- http://www.securityfocus.com/bid/100106Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/100106Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-6745?
How severe is CVE-2017-6745?
How do I fix CVE-2017-6745?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-6739A vulnerability in the SNMP implementation of could allow an…8.8
- CVE-2017-6740The Simple Network Management Protocol (SNMP) subsystem of C…8.8
- CVE-2017-6741A vulnerability in the SNMP implementation of could allow an…8.8
- CVE-2017-6742A vulnerability in the SNMP implementation of could allow an…8.8
- CVE-2017-6743The Simple Network Management Protocol (SNMP) subsystem of C…8.8
- CVE-2017-6744The Simple Network Management Protocol (SNMP) subsystem of C…8.8
- CVE-2017-6746A vulnerability in the web interface of the Cisco Web Securi…
- CVE-2017-6747A vulnerability in the authentication module of Cisco Identi…
- CVE-2017-6748A vulnerability in the CLI parser of the Cisco Web Security …
- CVE-2017-6749A vulnerability in the web-based management interface of Cis…
- CVE-2017-6750A vulnerability in AsyncOS for the Cisco Web Security Applia…
- CVE-2017-6751A vulnerability in the web proxy functionality of the Cisco …7.5
Are you affected by CVE-2017-6745?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
