CVE-2021-1312

CWE-400 — Uncontrolled Resource Consumption4 documents4 sources
Severity
7.5HIGH
EPSS
1.5%
top 19.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Elastic Services ControllerCisco Cisco Elastic Services Controller
Timeline
PublishedJan 20
Latest updateMay 24

Description

A vulnerability in the system resource management of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) to the health monitor API on an affected device. The vulnerability is due to inadequate provisioning of kernel parameters for the maximum number of TCP connections and SYN backlog. An attacker could exploit this vulnerability by sending a flood of crafted TCP packets to an affected device. A successful exploit could allow …

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-3fjh-3qmq-p25v: A vulnerability in the system resource management of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to cause↗2022-05-24
▶
CVEList
Cisco Elastic Services Controller Denial of Service Vulnerability↗2021-01-20
▶

📋Vendor Advisories

1
Cisco
Cisco Elastic Services Controller Denial of Service Vulnerability↗2021-01-20
▶
CVE-2021-1312 (HIGH CVSS 7.5) | A vulnerability in the system resou | cvebase.io