CVE-2013-1135

Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.0 is affected by a DoS due to processing malformed TLS messages on TCP ports 9043 and 9443. The root cause is an excessive CPU/resource consumption when handling abnormal TLS traffic, leading to monitoring outage. Exp...

CVE-2013-3388

Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.x before 9.2(1) is affected by a denial-of-service vulnerability that allows remote attackers to cause memory consumption by flooding TCP port 44444. The issue is confirmed in multiple sources (e.g., Cisco advisory ci...

CVE-2013-3390

CVE-2013-3390 affects Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.x prior to 9.2(1). The issue is a memory leak in the product that allows a remote attacker to cause a denial of service via a flood of TCP packets (Bug CSCub59158). The vulnerability is tied to C...

CVE-2013-3389

CVE-2013-3389 affects Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.x before 9.2(1). The vulnerability allows remote attackers to cause a denial of service through a flood of TCP traffic to ports 61615 or 61616, leading to memory consumption. This is tied to Bug ...

CVE-2015-4292

Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) 10.6(2) contains a cross-site scripting (XSS) vulnerability in its management interface caused by insufficient input filtering of user-submitted values. Exploitation would allow a remote attacker to inject arbitrary web script or HTML...

CVE-2013-3473

CVE-2013-3473 affects Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance prior to 9.1.1. The issue is improper session handling: the web framework does not reliably determine an authenticated session, enabling unauthenticated remote attackers to enumerate usernames and password...

CVE-2013-3387

Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.x before 9.2(1) is affected by CVE-2013-3387. The vulnerability allows remote attackers to cause a denial of service (disk consumption) by flooding TCP port 5400, producing large error-log files (Bug ID CSCua42724). A...