Vulnerability Description
A vulnerability in the Trust Verification Service (TVS) of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of Transport Layer Security (TLS) traffic by the affected software. An attacker could exploit this vulnerability by generating incomplete traffic streams. A successful exploit could allow the attacker to deny access to the TVS for an affected device, resulting in a DoS condition, until an administrator restarts the service. Known Affected Releases 10.0(1.10000.24) 10.5(2.10000.5) 11.0(1.10000.10) 9.1(2.10000.28). Cisco Bug IDs: CSCux21905.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Unified Communications Manager | 9.1\(2.10000.28\) |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/100662Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039286Third Party AdvisoryVDB Entry
- https://quickview.cloudapps.cisco.com/quickview/bug/CSCux21905Vendor Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2Vendor Advisory
- http://www.securityfocus.com/bid/100662Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039286Third Party AdvisoryVDB Entry
- https://quickview.cloudapps.cisco.com/quickview/bug/CSCux21905Vendor Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2Vendor Advisory
FAQ
What is CVE-2017-6791?
CVE-2017-6791 is a vulnerability with a CVSS score of 7.5 (HIGH). A vulnerability in the Trust Verification Service (TVS) of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affec...
How severe is CVE-2017-6791?
CVE-2017-6791 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-6791?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Unified Communications Manager.