CVE-2017-6653: cisco identity_services_engine Resource Management Errors

Vulnerability summary

CVE-2017-6653 is a high (CVSS 7.5) Resource Management Errors vulnerability in cisco identity_services_engine. EPSS estimates a 2.14% chance of exploitation in the next 30 days, higher than 81.7% of scored vulnerabilities.

Timeline

1. 22-05-2017
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

A vulnerability in the TCP throttling process for the GUI of the Cisco Identity Services Engine (ISE) 2.1(0.474) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device where the ISE GUI may fail to respond to new or established connection requests. The vulnerability is due to insufficient TCP rate limiting protection on the GUI. An attacker could exploit this vulnerability by sending the affected device a high rate of TCP connections to the GUI. An exploit could allow the attacker to cause the GUI to stop responding while the high rate of connections is in progress. Cisco Bug IDs: CSCvc81803.

• CWE-399Resource Management ErrorsWeaknesses in this category are related to improper management of system resources.
• CWE-770Allocation of Resources Without Limits or ThrottlingThe product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.