CVE-2018-0290: Medium severity cisco socialminer vulnerability
A vulnerability in the TCP stack of Cisco SocialMiner could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition in the notification system. The vulnerability is due to faulty handling of new TCP connections to the affected application. An attacker could exploit this vulnerability by sending a malicious TCP packet to the vulnerable service. An exploit could allow the attacker to create a DoS condition by interrupting certain phone services. A manual restart of the service may be required to restore full functionalities. Cisco Bug IDs: CSCvh48368.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this Cisco SocialMiner vulnerability?
The vulnerability ID is CVE-2018-0290.
What is the severity level of CVE-2018-0290?
The severity level of CVE-2018-0290 is medium.
How can an attacker exploit CVE-2018-0290?
An attacker can exploit CVE-2018-0290 by causing a denial of service (DoS) condition in the notification system of Cisco SocialMiner.
What software version of Cisco SocialMiner is affected by CVE-2018-0290?
Cisco SocialMiner version 11.6(1) is affected by CVE-2018-0290.
Is there a fix available for CVE-2018-0290?
Yes, Cisco has released a security advisory with mitigation details for CVE-2018-0290.