CVE-2017-6745: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the cache server within Cisco Videoscape Distribution Suite VDS for Television 3.25ES1 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on a targeted appliance. The vulnerability is due to excessive mapped connections exhausting the...

PT-2017-2888

Name of the Vulnerable Software and Affected Versions Cisco Videoscape Distribution Suite for Television version 3.25ES1 Description A vulnerability in the cache server could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on a targeted appliance. The issue is...

CVE-2016-6418: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco Videoscape Distribution Suite Service Manager VDS-SM 3.0 through 3.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCva14552...

PT-2016-6892

Name of the Vulnerable Software and Affected Versions Cisco Videoscape Distribution Suite Service Manager VDS-SM versions 3.0 through 3.4.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Recommendations For versions 3...

Cisco VDS-IS Resource Management Error Vulnerability

Cisco VDS-IS Videoscape Distribution Suite for Internet Streaming Cisco's set of content distribution system solutions for Internet streaming media. A security vulnerability exists in Cisco VDS-IS because the program fails to properly manage TCP sessions in the TCP FIN waiting state. A remote...

CVE-2016-1353: Undefined Security Weakness

The TCP implementation in Cisco Videoscape Distribution Suite for Internet Streaming VDS-IS 3.30, 3.31, 4.00, and 4.10 does not properly initiate new TCP sessions when a previous session is in a FIN wait state, which allows remote attackers to cause a denial of service TCP outage via vectors...

PT-2016-4725

Name of the Vulnerable Software and Affected Versions Cisco Videoscape Distribution Suite for Internet Streaming VDS-IS versions 3.30 through 4.10 Description The issue is related to the TCP implementation, which does not properly handle new TCP sessions when a previous session is in a FIN wait...

CVE-2015-6417

Cisco Videoscape Distribution Suite Service Manager VDS-SM 3.4.0 and earlier does not always use RBAC for backend database access, which allows remote authenticated users to read or write to database entries via 1 the GUI or 2 a crafted HTTP request, aka Bug ID CSCuv87025...

CVE-2015-6417: Undefined Security Weakness

Cisco Videoscape Distribution Suite Service Manager VDS-SM 3.4.0 and earlier does not always use RBAC for backend database access, which allows remote authenticated users to read or write to database entries via 1 the GUI or 2 a crafted HTTP request, aka Bug ID CSCuv87025...

PT-2015-7241

Name of the Vulnerable Software and Affected Versions Cisco Videoscape Distribution Suite Service Manager VDS-SM versions 3.4.0 and earlier Description The issue allows remote authenticated users to read or write to database entries via the GUI or a crafted HTTP request, due to insufficient use o...

CVE-2015-0725

Cisco Videoscape Distribution Suite Service Broker aka VDS-SB, when a VDSM configuration on UCS is used, and Videoscape Distribution Suite for Internet Streaming aka VDS-IS or CDS-IS before 3.3.1 R7 and 4.x before 4.0.0 R4 allow remote attackers to cause a denial of service device reload via a...

PT-2015-4840

Name of the Vulnerable Software and Affected Versions Cisco Videoscape Distribution Suite Service Broker aka VDS-SB versions prior to 3.3.1 R7 Cisco Videoscape Distribution Suite for Internet Streaming aka VDS-IS or CDS-IS versions prior to 4.0.0 R4 Description The issue allows remote attackers t...

CVE-2015-0725: Improper Input Validation

Cisco Videoscape Distribution Suite Service Broker aka VDS-SB, when a VDSM configuration on UCS is used, and Videoscape Distribution Suite for Internet Streaming aka VDS-IS or CDS-IS before 3.3.1 R7 and 4.x before 4.0.0 R4 allow remote attackers to cause a denial of service device reload via a...

PT-2015-4798

Name of the Vulnerable Software and Affected Versions Cisco Videoscape Distribution Suite for Internet Streaming VDS-IS version 3.21 Description The issue allows remote attackers to cause a denial of service, resulting in CPU consumption and network-resource consumption, via crafted packets...

CVE-2015-0671: Undefined Security Weakness

The DNS implementation in Cisco Videoscape Distribution Suite for Internet Streaming VDS-IS 3.21 allows remote attackers to cause a denial of service CPU consumption and network-resource consumption via crafted packets, aka Bug ID CSCun15911...