CVE-2017-6633
7.5
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD
Description
A vulnerability in the TCP throttling process of Cisco UCS C-Series Rack Servers 3.0(0.234) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient rate-limiting protection. An attacker could exploit this vulnerability by sending a high rate of TCP SYN packets to a specific TCP listening port on an affected device. An exploit could allow the attacker to cause a specific TCP listening port to stop accepting new connections, resulting in a DoS condition. Cisco Bug IDs: CSCva65544.
Affected (1)
Products: Cisco: Unified Computing System
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 3.0(0.234) |
| Running on/with | Platform Versions |
|---|---|
Cisco Ucs C220 M4 Rack Server | All versions |
Cisco Ucs C240 M4 Rack Server | All versions |
Cisco Ucs C3160 Rack Server | All versions |
Cisco Ucs C460 M4 Rack Server | All versions |
References (6)
Source: psirt@cisco.com
Source: psirt@cisco.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.