CVE-2017-6779

CWE-399 CWE-400 — Uncontrolled Resource Consumption4 documents4 sources

Severity

7.5HIGH

EPSS

0.6%

top 31.51%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Cisco Emergency Responder Cisco Finesse Cisco Hosted Collaboration Mediation Fulfillment +10 more

Timeline

PublishedJun 7

Latest updateMay 13

Description

Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability occurs because a certain system log file does not have a maximum size restriction. Therefore, the file is allowed to consume the majority of available disk space on the appliance. An attacker could exploit…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages14 packages

▶NVDcisco/unified_communications_manager10.0 — 10.5\(2\)su5+6

▶NVDcisco/unified_contact_center_express11.6 — 11.6\(1\)+1

▶NVDcisco/unified_intelligence_center11.6 — 11.6\(1\)+1

▶NVDcisco/prime_license_manager10.5 — 10.5.2+1

▶NVDcisco/prime_collaboration_assurance11.6 — 11.6_es16+1

🔴Vulnerability Details

GHSA

GHSA-jfgw-vvcr-pv6q: Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that cou↗2022-05-13

▶

CVEList

CVE-2017-6779: Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that cou↗2018-06-07

▶