Lucene search

CiscoCVE-2017-3825

HistoryMay 16, 2017 - 5:29 p.m.

CVE-2017-3825

2017-05-1617:29:00

CWE-20

cisco

web.nvd.nist.gov

cisco

telepresence

ce software

vulnerability

dos

icmp

cve-2017-3825

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.5

Confidence

High

EPSS

0.004

Percentile

72.1%

JSON

A vulnerability in the ICMP ingress packet processing of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an unauthenticated, remote attacker to cause the TelePresence endpoint to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to incomplete input validation for the size of a received ICMP packet. An attacker could exploit this vulnerability by sending a crafted ICMP packet to the local IP address of the targeted endpoint. A successful exploit could allow the attacker to cause a DoS of the TelePresence endpoint, during which time calls could be dropped. This vulnerability would affect either IPv4 or IPv6 ICMP traffic. This vulnerability affects the following Cisco TelePresence products when running software release CE8.1.1, CE8.2.0, CE8.2.1, CE8.2.2, CE 8.3.0, or CE8.3.1: Spark Room OS, TelePresence DX Series, TelePresence MX Series, TelePresence SX Quick Set Series, TelePresence SX Series. Cisco Bug IDs: CSCvb95396.

Affected configurations

Nvd

Node

ciscotelepresence_ceMatch8.0.0

ciscotelepresence_ceMatch8.1.0

ciscotelepresence_ceMatch8.2.0

ciscotelepresence_tcMatch4.2.0

ciscotelepresence_tcMatch4.2.1

ciscotelepresence_tcMatch4.2.2

ciscotelepresence_tcMatch4.2.3

ciscotelepresence_tcMatch4.2.4

ciscotelepresence_tcMatch5.1.11

ciscotelepresence_tcMatch5.1.13

ciscotelepresence_tcMatch6.0.2

ciscotelepresence_tcMatch6.0.3

ciscotelepresence_tcMatch6.0.4

ciscotelepresence_tcMatch6.1.3

ciscotelepresence_tcMatch6.1.4

ciscotelepresence_tcMatch6.3.1

ciscotelepresence_tcMatch6.3.2

ciscotelepresence_tcMatch6.3.3

ciscotelepresence_tcMatch6.3.4

ciscotelepresence_tcMatch6.3.5

ciscotelepresence_tcMatch7.1.1

ciscotelepresence_tcMatch7.1.2

ciscotelepresence_tcMatch7.1.3

ciscotelepresence_tcMatch7.1.4

ciscotelepresence_tcMatch7.3.6

ciscotelepresence_tcMatch7.3.7

VendorProductVersionCPE
ciscotelepresence_ce8.0.0cpe:2.3:a:cisco:telepresence_ce:8.0.0:*:*:*:*:*:*:*
ciscotelepresence_ce8.1.0cpe:2.3:a:cisco:telepresence_ce:8.1.0:*:*:*:*:*:*:*
ciscotelepresence_ce8.2.0cpe:2.3:a:cisco:telepresence_ce:8.2.0:*:*:*:*:*:*:*
ciscotelepresence_tc4.2.0cpe:2.3:a:cisco:telepresence_tc:4.2.0:*:*:*:*:*:*:*
ciscotelepresence_tc4.2.1cpe:2.3:a:cisco:telepresence_tc:4.2.1:*:*:*:*:*:*:*
ciscotelepresence_tc4.2.2cpe:2.3:a:cisco:telepresence_tc:4.2.2:*:*:*:*:*:*:*
ciscotelepresence_tc4.2.3cpe:2.3:a:cisco:telepresence_tc:4.2.3:*:*:*:*:*:*:*
ciscotelepresence_tc4.2.4cpe:2.3:a:cisco:telepresence_tc:4.2.4:*:*:*:*:*:*:*
ciscotelepresence_tc5.1.11cpe:2.3:a:cisco:telepresence_tc:5.1.11:*:*:*:*:*:*:*
ciscotelepresence_tc5.1.13cpe:2.3:a:cisco:telepresence_tc:5.1.13:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	telepresence_ce	8.0.0	cpe:2.3:a:cisco:telepresence_ce:8.0.0:::::::*
cisco	telepresence_ce	8.1.0	cpe:2.3:a:cisco:telepresence_ce:8.1.0:::::::*
cisco	telepresence_ce	8.2.0	cpe:2.3:a:cisco:telepresence_ce:8.2.0:::::::*
cisco	telepresence_tc	4.2.0	cpe:2.3:a:cisco:telepresence_tc:4.2.0:::::::*
cisco	telepresence_tc	4.2.1	cpe:2.3:a:cisco:telepresence_tc:4.2.1:::::::*
cisco	telepresence_tc	4.2.2	cpe:2.3:a:cisco:telepresence_tc:4.2.2:::::::*
cisco	telepresence_tc	4.2.3	cpe:2.3:a:cisco:telepresence_tc:4.2.3:::::::*
cisco	telepresence_tc	4.2.4	cpe:2.3:a:cisco:telepresence_tc:4.2.4:::::::*
cisco	telepresence_tc	5.1.11	cpe:2.3:a:cisco:telepresence_tc:5.1.11:::::::*
cisco	telepresence_tc	5.1.13	cpe:2.3:a:cisco:telepresence_tc:5.1.13:::::::*

Rows per page:

1-10 of 261

CNA Affected

[
  {
    "product": "Cisco TelePresence",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco TelePresence"
      }
    ]
  }
]

References

www.securityfocus.com/bid/98293

www.securitytracker.com/id/1038392

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-ctp

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.5

Confidence

High

EPSS

0.004

Percentile

72.1%

JSON

Related for CVE-2017-3825