CVE-2017-6790: cisco systems, inc. telepresence video communication server (vcs)
Vulnerability summary
CVE-2017-6790 is a high (CVSS 7.1) vulnerability in cisco systems, inc. telepresence video communication server (vcs). EPSS estimates a 2.03% chance of exploitation in the next 30 days, higher than 80.7% of scored vulnerabilities.
Timeline
- 17-08-2017PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
A vulnerability in the Session Initiation Protocol (SIP) on the Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the targeted appliance. The vulnerability is due to excessive SIP traffic sent to the device. An attacker could exploit this vulnerability by transmitting large volumes of SIP traffic to the VCS. An exploit could allow the attacker to cause a complete DoS condition on the targeted system. Cisco Bug IDs: CSCve32897.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
2.03%
Chance of exploitation in the next 30 days
Percentile
81%
Versus all other CVEs
30-day change
0.00 pp
From 2.03% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Cisco1 product
- telepresence_video_communication_serverx8.7 | x8.7.1 | x8.7.2 | x8.7.3 | x8.8 | x8.9
Cisco systems, inc.1 product
2 vendors · 2 products
References
3 links- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-vcsVendor AdvisoryX Refsource CISCO