CVE-2017-6790
First published: Wed Aug 16 2017(Updated: )
A vulnerability in the Session Initiation Protocol (SIP) on the Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the targeted appliance. The vulnerability is due to excessive SIP traffic sent to the device. An attacker could exploit this vulnerability by transmitting large volumes of SIP traffic to the VCS. An exploit could allow the attacker to cause a complete DoS condition on the targeted system. Cisco Bug IDs: CSCve32897.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tandberg Video Communication Server | =x8.7 | |
| Tandberg Video Communication Server | =x8.7.1 | |
| Tandberg Video Communication Server | =x8.7.2 | |
| Tandberg Video Communication Server | =x8.7.3 | |
| Tandberg Video Communication Server | =x8.8 | |
| Tandberg Video Communication Server | =x8.9 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-6790?
The severity of CVE-2017-6790 is classified as high due to its potential to cause a denial of service (DoS) condition.
How do I fix CVE-2017-6790?
To fix CVE-2017-6790, users should upgrade their Cisco TelePresence Video Communication Server to a patched version provided by Cisco.
What versions are affected by CVE-2017-6790?
CVE-2017-6790 affects Cisco TelePresence Video Communication Server versions x8.7, x8.7.1, x8.7.2, x8.7.3, x8.8, and x8.9.
Can CVE-2017-6790 be exploited remotely?
Yes, CVE-2017-6790 can be exploited by an unauthenticated remote attacker.
What type of vulnerability is CVE-2017-6790?
CVE-2017-6790 is a denial of service (DoS) vulnerability related to excessive SIP traffic.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/references
- agent/author
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/trending
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/tandberg video communication server
- version/tandberg video communication server/x8.7
- version/tandberg video communication server/x8.7.1
- version/tandberg video communication server/x8.7.2
- version/tandberg video communication server/x8.7.3
- version/tandberg video communication server/x8.8
- version/tandberg video communication server/x8.9