Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2017-6779 (GCVE-0-2017-6779)
Vulnerability from cvelistv5 – Published: 2018-06-07 12:00 – Updated: 2024-11-29 15:07| URL | Tags |
|---|---|
| https://tools.cisco.com/security/center/content/C… | x_refsource_CONFIRM |
| Vendor | Product | Version | |
|---|---|---|---|
| n/a | Multiple Cisco Products unknown |
Affected:
Multiple Cisco Products unknown
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T15:41:17.143Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-diskdos"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2017-6779",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-29T14:43:53.428544Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-29T15:07:21.731Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Multiple Cisco Products unknown",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Multiple Cisco Products unknown"
}
]
}
],
"datePublic": "2018-06-07T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability occurs because a certain system log file does not have a maximum size restriction. Therefore, the file is allowed to consume the majority of available disk space on the appliance. An attacker could exploit this vulnerability by sending crafted remote connection requests to the appliance. Successful exploitation could allow the attacker to increase the size of a system log file so that it consumes most of the disk space. The lack of available disk space could lead to a DoS condition in which the application functions could operate abnormally, making the appliance unstable. This vulnerability affects the following Cisco Voice Operating System (VOS)-based products: Emergency Responder, Finesse, Hosted Collaboration Mediation Fulfillment, MediaSense, Prime License Manager, SocialMiner, Unified Communications Manager (UCM), Unified Communications Manager IM and Presence Service (IM\u0026P - earlier releases were known as Cisco Unified Presence), Unified Communication Manager Session Management Edition (SME), Unified Contact Center Express (UCCx), Unified Intelligence Center (UIC), Unity Connection, Virtualized Voice Browser. This vulnerability also affects Prime Collaboration Assurance and Prime Collaboration Provisioning. Cisco Bug IDs: CSCvd10872, CSCvf64322, CSCvf64332, CSCvi29538, CSCvi29543, CSCvi29544, CSCvi29546, CSCvi29556, CSCvi29571, CSCvi31738, CSCvi31741, CSCvi31762, CSCvi31807, CSCvi31818, CSCvi31823."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-399",
"description": "CWE-399",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-06-07T11:57:01.000Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-diskdos"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@cisco.com",
"ID": "CVE-2017-6779",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Multiple Cisco Products unknown",
"version": {
"version_data": [
{
"version_value": "Multiple Cisco Products unknown"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability occurs because a certain system log file does not have a maximum size restriction. Therefore, the file is allowed to consume the majority of available disk space on the appliance. An attacker could exploit this vulnerability by sending crafted remote connection requests to the appliance. Successful exploitation could allow the attacker to increase the size of a system log file so that it consumes most of the disk space. The lack of available disk space could lead to a DoS condition in which the application functions could operate abnormally, making the appliance unstable. This vulnerability affects the following Cisco Voice Operating System (VOS)-based products: Emergency Responder, Finesse, Hosted Collaboration Mediation Fulfillment, MediaSense, Prime License Manager, SocialMiner, Unified Communications Manager (UCM), Unified Communications Manager IM and Presence Service (IM\u0026P - earlier releases were known as Cisco Unified Presence), Unified Communication Manager Session Management Edition (SME), Unified Contact Center Express (UCCx), Unified Intelligence Center (UIC), Unity Connection, Virtualized Voice Browser. This vulnerability also affects Prime Collaboration Assurance and Prime Collaboration Provisioning. Cisco Bug IDs: CSCvd10872, CSCvf64322, CSCvf64332, CSCvi29538, CSCvi29543, CSCvi29544, CSCvi29546, CSCvi29556, CSCvi29571, CSCvi31738, CSCvi31741, CSCvi31762, CSCvi31807, CSCvi31818, CSCvi31823."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-399"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-diskdos",
"refsource": "CONFIRM",
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-diskdos"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2017-6779",
"datePublished": "2018-06-07T12:00:00.000Z",
"dateReserved": "2017-03-09T00:00:00.000Z",
"dateUpdated": "2024-11-29T15:07:21.731Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2017-6779",
"date": "2026-06-03",
"epss": "0.00567",
"percentile": "0.68843"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2017-6779\",\"sourceIdentifier\":\"psirt@cisco.com\",\"published\":\"2018-06-07T12:29:00.260\",\"lastModified\":\"2025-07-31T15:03:24.870\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability occurs because a certain system log file does not have a maximum size restriction. Therefore, the file is allowed to consume the majority of available disk space on the appliance. An attacker could exploit this vulnerability by sending crafted remote connection requests to the appliance. Successful exploitation could allow the attacker to increase the size of a system log file so that it consumes most of the disk space. The lack of available disk space could lead to a DoS condition in which the application functions could operate abnormally, making the appliance unstable. This vulnerability affects the following Cisco Voice Operating System (VOS)-based products: Emergency Responder, Finesse, Hosted Collaboration Mediation Fulfillment, MediaSense, Prime License Manager, SocialMiner, Unified Communications Manager (UCM), Unified Communications Manager IM and Presence Service (IM\u0026P - earlier releases were known as Cisco Unified Presence), Unified Communication Manager Session Management Edition (SME), Unified Contact Center Express (UCCx), Unified Intelligence Center (UIC), Unity Connection, Virtualized Voice Browser. This vulnerability also affects Prime Collaboration Assurance and Prime Collaboration Provisioning. Cisco Bug IDs: CSCvd10872, CSCvf64322, CSCvf64332, CSCvi29538, CSCvi29543, CSCvi29544, CSCvi29546, CSCvi29556, CSCvi29571, CSCvi31738, CSCvi31741, CSCvi31762, CSCvi31807, CSCvi31818, CSCvi31823.\"},{\"lang\":\"es\",\"value\":\"M\u00faltiples productos Cisco se han visto afectados por una vulnerabilidad en la gesti\u00f3n de archivos locales para ciertos archivos de log del sistema de productos Cisco Collaboration que podr\u00edan permitir que un atacante remoto no autenticado provoque un gran uso del disco, lo que resulta en una condici\u00f3n de denegaci\u00f3n de servicio (DoS). La vulnerabilidad ocurre debido a que cierto archivo de registro del sistema no tiene una restricci\u00f3n de tama\u00f1o m\u00e1ximo. Por lo tanto, se permite que el archivo consuma la mayor\u00eda de espacio disponible en el dispositivo. Un atacante podr\u00eda explotar esta vulnerabilidad enviando peticiones de conexi\u00f3n remota manipuladas al dispositivo. La explotaci\u00f3n con \u00e9xito podr\u00eda permitir que el atacante aumente el tama\u00f1o de un archivo de log del sistema para que consuma casi todo el espacio del disco. La falta de espacio disponible en el disco podr\u00eda desembocar en una condici\u00f3n de denegaci\u00f3n de servicio (DoS) en la que las funciones de la aplicaci\u00f3n podr\u00edan operar de forma err\u00f3nea, haciendo que la aplicaci\u00f3n sea inestable. Esta vulnerabilidad afecta a los siguientes productos basados en Cisco Voice Operating System (VOS): Emergency Responder, Finesse, Hosted Collaboration Mediation Fulfillment, MediaSense, Prime License Manager, SocialMiner, Unified Communications Manager (UCM), Unified Communications Manager IM and Presence Service (IMP - earlier releases were known as Cisco Unified Presence), Unified Communication Manager Session Management Edition (SME), Unified Contact Center Express (UCCx), Unified Intelligence Center (UIC), Unity Connection y Virtualized Voice Browser. Esta vulnerabilidad tambi\u00e9n afecta a Prime Collaboration Assurance y Prime Collaboration Provisioning. Cisco Bug IDs: CSCvd10872, CSCvf64322, CSCvf64332, CSCvi29538, CSCvi29543, CSCvi29544, CSCvi29546, CSCvi29556, CSCvi29571, CSCvi31738, CSCvi31741, CSCvi31762, CSCvi31807, CSCvi31818 y CSCvi31823.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:C\",\"baseScore\":7.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-399\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-400\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:emergency_responder:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.5\",\"versionEndExcluding\":\"10.5\\\\(1a\\\\)\",\"matchCriteriaId\":\"57F71C50-5AEA-4C57-B40D-BD175CE99F61\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:emergency_responder:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.0\",\"versionEndExcluding\":\"11.5\\\\(4\\\\)\",\"matchCriteriaId\":\"EADE21CC-8C70-4270-9431-30C4213A8115\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:emergency_responder:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.0\",\"versionEndExcluding\":\"12.0su1\",\"matchCriteriaId\":\"650A41E1-9A81-4C08-9DDF-9CDDC6E22202\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:emergency_responder:11.0\\\\(1.10000.10\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6E73AED2-74FE-410F-835A-7BD9E5E6C7DE\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:finesse:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.5\",\"versionEndExcluding\":\"11.5\\\\(3\\\\)\",\"matchCriteriaId\":\"17A01F3E-24B2-4FE4-8466-6DE2EFA0530C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:finesse:9.5\\\\(1\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"359B9780-D7A7-467C-A665-573C62E981EB\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.5\",\"versionEndExcluding\":\"11.5\\\\(3\\\\)\",\"matchCriteriaId\":\"B834DBFE-9CB9-486C-8084-3735D0994D7F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:9.5\\\\(1\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D3EAC03-CB4A-423D-95BF-D7AB258CE2E0\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:mediasense:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.5\",\"versionEndExcluding\":\"11.5su2\",\"matchCriteriaId\":\"8CEF5671-AEB6-442B-8D9F-242447410512\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:mediasense:9.5\\\\(1\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"37B3DC93-6772-4836-B969-3D8B0359D4AF\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:prime_collaboration_assurance:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.6\",\"versionEndExcluding\":\"11.6_es16\",\"matchCriteriaId\":\"CB04C20D-B989-4B4D-B5F9-C2067CC886E1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:prime_collaboration_assurance:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.1\",\"versionEndExcluding\":\"12.1_es2\",\"matchCriteriaId\":\"B92B3174-0187-4C3A-AFE7-2443FBAEA97E\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:prime_collaboration_provisioning:12.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2BDA7BD5-70AE-431C-8E92-171A84BAA77F\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:prime_license_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.5\",\"versionEndExcluding\":\"10.5.2\",\"matchCriteriaId\":\"FA9960C4-874D-44DF-B686-9039179378F4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:prime_license_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.0\",\"versionEndExcluding\":\"11.5\\\\(1\\\\)su5\",\"matchCriteriaId\":\"10FC0ED2-B2D2-4F52-B2B0-AC0DDCB430E9\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:socialminer:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.6\",\"versionEndExcluding\":\"11.6.1\",\"matchCriteriaId\":\"F8F4EDF5-67A4-42E1-BCB3-DB36A74C15A7\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.0\",\"versionEndExcluding\":\"10.5\\\\(2\\\\)su5\",\"matchCriteriaId\":\"DE65718F-D5E7-4FFA-985E-D0BCE395DBAE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.0\",\"versionEndExcluding\":\"11.0\\\\(1a\\\\)su4\",\"matchCriteriaId\":\"CE99092A-3EB2-4F0B-8812-ECA6B67AA301\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.5\",\"versionEndExcluding\":\"11.5\\\\(1\\\\)su3\",\"matchCriteriaId\":\"8439C2DF-9F4B-40FE-8898-6331064026AA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_communications_manager:10.5\\\\(2.10000.5\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"520555C7-5E9B-4C76-AAB5-5DD8B29D18F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_communications_manager:11.0\\\\(1.10000.10\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F47282B9-8B76-40E0-B72C-A6A196A37A0C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_communications_manager:11.5\\\\(1.10000.6\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"21BFC3A9-B6B1-49EE-A93A-6432BFE33E84\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_communications_manager:12.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"05BD68E4-4296-49ED-B789-60B935210C28\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_contact_center_express:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.6\",\"versionEndExcluding\":\"11.6\\\\(1\\\\)\",\"matchCriteriaId\":\"271E4847-9AF4-4DDC-82AB-3BE20F7A67F9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_contact_center_express:9.0\\\\(2\\\\)su1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"31FFF48A-B174-4FD6-9626-E81B5BAE3B43\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_intelligence_center:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.6\",\"versionEndExcluding\":\"11.6\\\\(1\\\\)\",\"matchCriteriaId\":\"30B24C3F-B602-42B6-95E8-C1E4B247A28D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_intelligence_center:9.5\\\\(1\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1D8337AC-7B8F-42E0-A714-ACD569C0CA77\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unity_connection:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.5\",\"versionEndExcluding\":\"10.5su5\",\"matchCriteriaId\":\"4F1EF97D-52BC-4A60-9A73-09BFAAD05DAD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unity_connection:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.0\",\"versionEndExcluding\":\"11.5.1su3\",\"matchCriteriaId\":\"DFD34725-568D-4612-A84F-FF524D57F0E4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unity_connection:9.5\\\\(0.9\\\\)tt0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0C5B4499-83A3-461B-AC8C-45BEABCBA1CE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unity_connection:12.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"65D225AB-813B-4182-8916-0FE8307BB18B\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:virtualized_voice_browser:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.6\",\"versionEndExcluding\":\"11.6\\\\(1\\\\)\",\"matchCriteriaId\":\"A9928C83-6BEB-44AA-BB2E-AA2B9DC58BE4\"}]}]}],\"references\":[{\"url\":\"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-diskdos\",\"source\":\"psirt@cisco.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-diskdos\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-diskdos\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-05T15:41:17.143Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2017-6779\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-11-29T14:43:53.428544Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-11-29T14:44:39.471Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"n/a\", \"product\": \"Multiple Cisco Products unknown\", \"versions\": [{\"status\": \"affected\", \"version\": \"Multiple Cisco Products unknown\"}]}], \"datePublic\": \"2018-06-07T00:00:00.000Z\", \"references\": [{\"url\": \"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-diskdos\", \"tags\": [\"x_refsource_CONFIRM\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability occurs because a certain system log file does not have a maximum size restriction. Therefore, the file is allowed to consume the majority of available disk space on the appliance. An attacker could exploit this vulnerability by sending crafted remote connection requests to the appliance. Successful exploitation could allow the attacker to increase the size of a system log file so that it consumes most of the disk space. The lack of available disk space could lead to a DoS condition in which the application functions could operate abnormally, making the appliance unstable. This vulnerability affects the following Cisco Voice Operating System (VOS)-based products: Emergency Responder, Finesse, Hosted Collaboration Mediation Fulfillment, MediaSense, Prime License Manager, SocialMiner, Unified Communications Manager (UCM), Unified Communications Manager IM and Presence Service (IM\u0026P - earlier releases were known as Cisco Unified Presence), Unified Communication Manager Session Management Edition (SME), Unified Contact Center Express (UCCx), Unified Intelligence Center (UIC), Unity Connection, Virtualized Voice Browser. This vulnerability also affects Prime Collaboration Assurance and Prime Collaboration Provisioning. Cisco Bug IDs: CSCvd10872, CSCvf64322, CSCvf64332, CSCvi29538, CSCvi29543, CSCvi29544, CSCvi29546, CSCvi29556, CSCvi29571, CSCvi31738, CSCvi31741, CSCvi31762, CSCvi31807, CSCvi31818, CSCvi31823.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-399\", \"description\": \"CWE-399\"}]}], \"providerMetadata\": {\"orgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"shortName\": \"cisco\", \"dateUpdated\": \"2018-06-07T11:57:01.000Z\"}, \"x_legacyV4Record\": {\"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"version\": {\"version_data\": [{\"version_value\": \"Multiple Cisco Products unknown\"}]}, \"product_name\": \"Multiple Cisco Products unknown\"}]}, \"vendor_name\": \"n/a\"}]}}, \"data_type\": \"CVE\", \"references\": {\"reference_data\": [{\"url\": \"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-diskdos\", \"name\": \"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-diskdos\", \"refsource\": \"CONFIRM\"}]}, \"data_format\": \"MITRE\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability occurs because a certain system log file does not have a maximum size restriction. Therefore, the file is allowed to consume the majority of available disk space on the appliance. An attacker could exploit this vulnerability by sending crafted remote connection requests to the appliance. Successful exploitation could allow the attacker to increase the size of a system log file so that it consumes most of the disk space. The lack of available disk space could lead to a DoS condition in which the application functions could operate abnormally, making the appliance unstable. This vulnerability affects the following Cisco Voice Operating System (VOS)-based products: Emergency Responder, Finesse, Hosted Collaboration Mediation Fulfillment, MediaSense, Prime License Manager, SocialMiner, Unified Communications Manager (UCM), Unified Communications Manager IM and Presence Service (IM\u0026P - earlier releases were known as Cisco Unified Presence), Unified Communication Manager Session Management Edition (SME), Unified Contact Center Express (UCCx), Unified Intelligence Center (UIC), Unity Connection, Virtualized Voice Browser. This vulnerability also affects Prime Collaboration Assurance and Prime Collaboration Provisioning. Cisco Bug IDs: CSCvd10872, CSCvf64322, CSCvf64332, CSCvi29538, CSCvi29543, CSCvi29544, CSCvi29546, CSCvi29556, CSCvi29571, CSCvi31738, CSCvi31741, CSCvi31762, CSCvi31807, CSCvi31818, CSCvi31823.\"}]}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \"CWE-399\"}]}]}, \"data_version\": \"4.0\", \"CVE_data_meta\": {\"ID\": \"CVE-2017-6779\", \"STATE\": \"PUBLIC\", \"ASSIGNER\": \"psirt@cisco.com\"}}}}",
"cveMetadata": "{\"cveId\": \"CVE-2017-6779\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-11-29T15:07:21.731Z\", \"dateReserved\": \"2017-03-09T00:00:00.000Z\", \"assignerOrgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"datePublished\": \"2018-06-07T12:00:00.000Z\", \"assignerShortName\": \"cisco\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
CERTFR-2018-AVI-270
Vulnerability from certfr_avis - Published: 2018-06-07 - Updated: 2018-06-07
De multiples vulnérabilités ont été découvertes dans les produits Cisco. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Vendor | Product | Description | ||
|---|---|---|---|---|
| Cisco | N/A | Prime Collaboration Assurance | ||
| Cisco | N/A | MediaSense | ||
| Cisco | N/A | Prime Collaboration Provisioning | ||
| Cisco | IOS XE | Cisco IOS XE versions Fuji 16.7.1 ou Fuji 16.8.1 configurées pour utiliser l'authentification AAA | ||
| Cisco | N/A | Cisco Meeting Server (CMS) 2000 exécutant une version logicielle CMS antérieures à 2.2.13 ou 2.3.4. | ||
| Cisco | N/A | Unified Intelligence Center (UIC) | ||
| Cisco | N/A | Emergency Responder | ||
| Cisco | N/A | Hosted Collaboration Mediation Fulfillment | ||
| Cisco | N/A | Prime License Manager | ||
| Cisco | Unified Communications Manager | Unified Communications Manager (UCM) | ||
| Cisco | N/A | Virtualized Voice Browser | ||
| Cisco | Unified Communications Manager | Unified Communications Manager IM and Presence Service (IM&P) | ||
| Cisco | N/A | Cisco Network Services Orchestrator (NSO) versions 4.1 à 4.1.6.0, 4.2 à 4.2.4.0, 4.3 à 4.3.3.0 et 4.4 à 4.4.2.0 | ||
| Cisco | N/A | SocialMiner | ||
| Cisco | N/A | Cisco AsyncOS avec une version 10.5.1, 10.5.2 ou 11.0.0 du logiciel WSA | ||
| Cisco | N/A | Cisco Prime Collaboration Provisioning (PCP) versions 12.2 et antérieures | ||
| Cisco | IP Phone | Cisco IP Phone series 6800, 7800 et 8800 avec un micorgiciel Multiplatform version antérieure à 11.1(2) | ||
| Cisco | N/A | Unified Contact Center Express (UCCx) | ||
| Cisco | N/A | Finesse | ||
| Cisco | Unity Connection | Unity Connection | ||
| Cisco | N/A | Unified Communication Manager Session Management Edition (SME) |
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Prime Collaboration Assurance",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "MediaSense",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Prime Collaboration Provisioning",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Cisco IOS XE versions Fuji 16.7.1 ou Fuji 16.8.1 configur\u00e9es pour utiliser l\u0027authentification AAA",
"product": {
"name": "IOS XE",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Cisco Meeting Server (CMS) 2000 ex\u00e9cutant une version logicielle CMS ant\u00e9rieures \u00e0 2.2.13 ou 2.3.4.",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Unified Intelligence Center (UIC)",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Emergency Responder",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Hosted Collaboration Mediation Fulfillment",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Prime License Manager",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Unified Communications Manager (UCM)",
"product": {
"name": "Unified Communications Manager",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Virtualized Voice Browser",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Unified Communications Manager IM and Presence Service (IM\u0026P)",
"product": {
"name": "Unified Communications Manager",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Cisco Network Services Orchestrator (NSO) versions 4.1 \u00e0 4.1.6.0, 4.2 \u00e0 4.2.4.0, 4.3 \u00e0 4.3.3.0 et 4.4 \u00e0 4.4.2.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "SocialMiner",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Cisco AsyncOS avec une version 10.5.1, 10.5.2 ou 11.0.0 du logiciel WSA",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Cisco Prime Collaboration Provisioning (PCP) versions 12.2 et ant\u00e9rieures",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Cisco IP Phone series 6800, 7800 et 8800 avec un micorgiciel Multiplatform version ant\u00e9rieure \u00e0 11.1(2)",
"product": {
"name": "IP Phone",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Unified Contact Center Express (UCCx)",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Finesse",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Unity Connection",
"product": {
"name": "Unity Connection",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Unified Communication Manager Session Management Edition (SME)",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2018-0320",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-0320"
},
{
"name": "CVE-2018-0317",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-0317"
},
{
"name": "CVE-2018-0274",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-0274"
},
{
"name": "CVE-2018-0321",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-0321"
},
{
"name": "CVE-2018-0319",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-0319"
},
{
"name": "CVE-2017-6779",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6779"
},
{
"name": "CVE-2018-0296",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-0296"
},
{
"name": "CVE-2018-0318",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-0318"
},
{
"name": "CVE-2018-0263",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-0263"
},
{
"name": "CVE-2018-0316",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-0316"
},
{
"name": "CVE-2018-0315",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-0315"
},
{
"name": "CVE-2018-0322",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-0322"
},
{
"name": "CVE-2018-0353",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-0353"
}
],
"initial_release_date": "2018-06-07T00:00:00",
"last_revision_date": "2018-06-07T00:00:00",
"links": [],
"reference": "CERTFR-2018-AVI-270",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2018-06-07T00:00:00.000000"
},
{
"description": "Version initiale",
"revision_date": "2018-06-07T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Cisco.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance\net un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Cisco",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180606-cms-id du 6 juin 2018",
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-cms-id"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180606-prime-bypass du 6 juin 2018",
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-prime-bypass"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180606-prime-password-recovery du 6 juin 2018",
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-prime-password-recovery"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180606-multiplatform-sip du 6 juin 2018",
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-multiplatform-sip"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180606-diskdos du 6 juin 2018",
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-diskdos"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180606-asaftd du 6 juin 2018",
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-asaftd"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180606-prime-sql du 6 juin 2018",
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-prime-sql"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180606-prime-access du 6 juin 2018",
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-prime-access"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180606-aaa du 6 juin 2018",
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-aaa"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180606-wsa du 6 juin 2018",
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-wsa"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180606-prime-password-reset du 6 juin 2018",
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-prime-password-reset"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180606-nso du 6 juin 2018",
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-nso"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180606-prime-rmi du 6 juin 2018",
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-prime-rmi"
}
]
}
CISCO-SA-20180606-DISKDOS
Vulnerability from csaf_cisco - Published: 2018-06-06 16:00 - Updated: 2018-07-02 14:32| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Cisco Unified Communications Manager
Cisco
|
— |
Vendor Fix
fix
|
|
|
Cisco Emergency Responder
Cisco
|
— |
Vendor Fix
fix
|
|
|
Cisco Unity Connection
Cisco
|
— |
Vendor Fix
fix
|
|
|
Cisco Unified Communications Manager IM and Presence Service
Cisco
|
— |
Vendor Fix
fix
|
|
|
Cisco Prime License Manager
Cisco
|
— |
Vendor Fix
fix
|
|
|
Cisco Hosted Collaboration Mediation Fulfillment
Cisco
|
— |
Vendor Fix
fix
|
|
|
Cisco Unified Contact Center Express
Cisco
|
— |
Vendor Fix
fix
|
|
|
Cisco SocialMiner
Cisco
|
— |
Vendor Fix
fix
|
|
|
Cisco Unified Intelligence Center
Cisco
|
— |
Vendor Fix
fix
|
|
|
Cisco Finesse
Cisco
|
— |
Vendor Fix
fix
|
|
|
Cisco MediaSense
Cisco
|
— |
Vendor Fix
fix
|
|
|
Cisco Prime Collaboration Deployment
Cisco
|
— |
Vendor Fix
fix
|
|
|
Cisco Prime Collaboration Provisioning
Cisco
|
— |
Vendor Fix
fix
|
|
|
Cisco Prime Collaboration Assurance
Cisco
|
— |
Vendor Fix
fix
|
|
|
Cisco Virtualized Voice Browser
Cisco
|
— |
Vendor Fix
fix
|
| URL | Category |
|---|---|
| https://sec.cloudapps.cisco.com/security/center/c… | self |
| https://sec.cloudapps.cisco.com/security/center/r… | external |
| https://sec.cloudapps.cisco.com/security/center/c… | external |
| https://www.cisco.com/c/en/us/products/end-user-l… | external |
| http://www.cisco.com/go/psirt | external |
| https://www.cisco.com/c/en/us/support/web/tsd-cis… | external |
| https://bst.cloudapps.cisco.com/bugsearch/bug/CSC… | external |
| https://software.cisco.com/download/navigator.html | external |
| https://software.cisco.com/download/navigator.html | external |
| https://bst.cloudapps.cisco.com/bugsearch/bug/CSC… | external |
| https://software.cisco.com/download/navigator.html | external |
| https://bst.cloudapps.cisco.com/bugsearch/bug/CSC… | external |
| https://software.cisco.com/download/navigator.html | external |
| https://bst.cloudapps.cisco.com/bugsearch/bug/CSC… | external |
| https://software.cisco.com/download/navigator.html | external |
| https://bst.cloudapps.cisco.com/bugsearch/bug/CSC… | external |
| https://software.cisco.com/download/navigator.html | external |
| https://bst.cloudapps.cisco.com/bugsearch/bug/CSC… | external |
| https://software.cisco.com/download/navigator.html | external |
| https://bst.cloudapps.cisco.com/bugsearch/bug/CSC… | external |
| https://software.cisco.com/download/navigator.html | external |
| https://bst.cloudapps.cisco.com/bugsearch/bug/CSC… | external |
| https://software.cisco.com/download/navigator.html | external |
| https://bst.cloudapps.cisco.com/bugsearch/bug/CSC… | external |
| https://software.cisco.com/download/navigator.html | external |
| https://bst.cloudapps.cisco.com/bugsearch/bug/CSC… | external |
| https://software.cisco.com/download/navigator.html | external |
| https://bst.cloudapps.cisco.com/bugsearch/bug/CSC… | external |
| https://software.cisco.com/download/navigator.html | external |
| https://bst.cloudapps.cisco.com/bugsearch/bug/CSC… | external |
| https://software.cisco.com/download/navigator.html | external |
| https://bst.cloudapps.cisco.com/bugsearch/bug/CSC… | external |
| https://software.cisco.com/download/navigator.html | external |
| https://bst.cloudapps.cisco.com/bugsearch/bug/CSC… | external |
| https://software.cisco.com/download/navigator.html | external |
| https://sec.cloudapps.cisco.com/security/center/r… | external |
{
"document": {
"acknowledgments": [
{
"summary": "This vulnerability was found during the resolution of a Cisco TAC support case."
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"notes": [
{
"category": "summary",
"text": "Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition.\r\n The vulnerability occurs because a certain system log file does not have a maximum size restriction. Therefore, the file is allowed to consume the majority of available disk space on the appliance. An attacker could exploit this vulnerability by sending crafted remote connection requests to the appliance. Successful exploitation could allow the attacker to increase the size of a system log file so that it consumes most of the disk space. The lack of available disk space could lead to a DoS condition in which the application functions could operate abnormally, making the appliance unstable.\r\n\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.\r\n\r\nThis advisory is available at the following link:\r\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-diskdos [\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-diskdos\"]",
"title": "Summary"
},
{
"category": "general",
"text": "This vulnerability affects the following Cisco Voice Operating System (VOS)-based products:\r\n\r\nEmergency Responder\r\nFinesse\r\nHosted Collaboration Mediation Fulfillment\r\nMediaSense\r\nPrime License Manager\r\nSocialMiner\r\nUnified Communications Manager (UCM)\r\nUnified Communications Manager IM and Presence Service (IM earlier releases were known as Cisco Unified Presence\r\nUnified Communication Manager Session Management Edition (SME)\r\nUnified Contact Center Express (UCCx)\r\nUnified Intelligence Center (UIC)\r\nUnity Connection\r\nVirtualized Voice Browser\r\n\r\nThis vulnerability also affects the following Cisco products:\r\n\r\nPrime Collaboration Assurance\r\nPrime Collaboration Provisioning\r\n Determining the Current Software Release from the CLI\r\nTo determine which software release is running on a platform, administrators can issue the show version active command in the CLI.\r\n\r\n In the following example, the software release is 11.5.1.10000-86:\r\n\r\n\r\nciscocm: show version active\r\nActive Master Version: 11.5.1.10000-86\r\n Determining the Current Software Release for the Cisco Unified or Contact Center Platform\r\nAdministrators can use the UI to determine which Cisco product software release is running:\r\n\r\nLog in to the web-based interface\r\nChoose Help \u003e About to view the system software release\r\n\r\nAdministrators can use the UI to determine which Cisco Contact Center platform\u2013based product software release is running:\r\n\r\nLog in to the Cisco Contact Center Express server\r\nGo to the Cisco Unified Communications operating system administration window\r\nChoose Show \u003e Software",
"title": "Vulnerable Products"
},
{
"category": "general",
"text": "Only products listed in the Vulnerable Products [\"#vp\"] section of this advisory are known to be affected by this vulnerability.\r\n Cisco has confirmed that this vulnerability does not affect the following Cisco products:\r\n\r\nIdentity Service (IdS) 11.5 and 11.6\r\nPrime Collaboration Deployment",
"title": "Products Confirmed Not Vulnerable"
},
{
"category": "general",
"text": "Exploitation of this vulnerability could cause the user to observe the following error in device logs:\r\n\r\n\r\n./hssi_defines.sh: line ###: echo: write error: No space left on device\r\n\r\nAdministrators who observe this error are advised to contact the Cisco Technical Assistance Center (TAC) to determine whether the device has been compromised by exploitation of this vulnerability.",
"title": "Indicators of Compromise"
},
{
"category": "general",
"text": "There are no workarounds that address this vulnerability.",
"title": "Workarounds"
},
{
"category": "general",
"text": "Cisco has released free software updates that address the vulnerability described in this advisory. Customers may only install and expect support for software versions and feature sets for which they have purchased a license. By installing, downloading, accessing, or otherwise using such software upgrades, customers agree to follow the terms of the Cisco software license:\r\nhttps://www.cisco.com/c/en/us/products/end-user-license-agreement.html [\"https://www.cisco.com/c/en/us/products/end-user-license-agreement.html\"]\r\n\r\nAdditionally, customers may only download software for which they have a valid license, procured from Cisco directly, or through a Cisco authorized reseller or partner. In most cases this will be a maintenance upgrade to software that was previously purchased. Free security software updates do not entitle customers to a new software license, additional software feature sets, or major revision upgrades.\r\n\r\nWhen considering software upgrades, customers are advised to regularly consult the advisories for Cisco products, which are available from the Cisco Security Advisories and Alerts page [\"http://www.cisco.com/go/psirt\"], to determine exposure and a complete upgrade solution.\r\n\r\nIn all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) or their contracted maintenance providers.\r\n\r\nCustomers Without Service Contracts\r\n\r\nCustomers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco TAC:\r\nhttps://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html [\"https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html\"]\r\n\r\nCustomers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade.\r\n Fixed Releases\r\n Emergency Responder: CSCvf64322 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvf64322\"]\r\n\r\nThe Emergency Responder Software can be downloaded from the Software Center [\"https://software.cisco.com/download/navigator.html\"] on Cisco.com by navigating to Products \u003e Unified Communications \u003e Telephony Extensions \u003e Emergency Responder.\r\n\r\n Emergency Responder Release First Fixed Release for This Vulnerability Prior to 10.5\r\n Vulnerable; migrate to 10.5(1a)\r\n 10.5\r\n 10.5(1a) (future release)1\r\n 11.0 Vulnerable; migrate to 11.5(4)\r\n 11.5 11.5(4)\r\n 12.0 12.0SU1\r\n\r\n 1The COP file ciscocm.cer_CSCvf64322.cop.sgn is available from the Software Center [\"https://software.cisco.com/download/navigator.html\"] on Cisco.com.\r\n\r\nFinesse: CSCvi29556 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvi29556\"]\r\n\r\nThe Finesse Software can be downloaded from the Software Center [\"https://software.cisco.com/download/navigator.html\"] on Cisco.com by navigating to Products \u003e Customer Collaboration \u003e Options for Contact Center Solutions \u003e Finesse \u003e Finesse Software.\r\n Finesse Release First Fixed Release for This Vulnerability Prior to 11.6 Vulnerable; migrate to 11.6(1)\r\n 11.6 11.6(1)\r\n\r\n Hosted Collaboration Mediation Fulfillment: CSCvi31738 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvi31738\"]\r\n The Hosted Collaboration Mediation Fulfillment Software can be downloaded from the Software Center [\"https://software.cisco.com/download/navigator.html\"] on Cisco.com by navigating to Products \u003e Unified Communications \u003e Call Control \u003e Hosted Collaboration \u003e Hosted Collaboration Solution (HCS).\r\n\r\n Hosted Collaboration Mediation Fulfillment Release First Fixed Release for This Vulnerability Prior to 11.5\r\n Vulnerable; migrate to 11.5(3)\r\n 11.5 11.5(3)\r\n MediaSense: CSCvi29546 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvi29546 \"]\r\n\r\nThe MediaSense Software can be downloaded from the Software Center [\"https://software.cisco.com/download/navigator.html\"] on Cisco.com by navigating to Products \u003e Customer Collaboration \u003e Options for Contact Center Solutions \u003e MediaSense \u003e MediaSense Software.\r\n\r\n MediaSense Release First Fixed Release for This Vulnerability Prior to 11.5\r\n Vulnerable; migrate to 11.5SU2\r\n 11.5 11.5SU2\r\n\r\n Prime Collaboration Assurance: CSCvi31818 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvi31818\"]\r\n\r\nThe Prime Collaboration Assurance Software can be downloaded from the Software Center [\"https://software.cisco.com/download/navigator.html\"] on Cisco.com by navigating to Products \u003e Cloud and Systems Management \u003e Collaboration and Unified Communications Management \u003e Prime Collaboration.\r\n\r\n Prime Collaboration Assurance Release First Fixed Release for This Vulnerability Prior to 11.6 Vulnerable; migrate to 11.6 ES16 11.6 11.6 ES16 12.1 12.1 ES2\r\n Prime Collaboration Provisioning: CSCvi31741 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvi31741\"]\r\n\r\nThe Prime Collaboration Provisioning Software can be downloaded from the Software Center [\"https://software.cisco.com/download/navigator.html\"] on Cisco.com by navigating to Products \u003e Cloud and Systems Management \u003e Collaboration and Unified Communications Management \u003e Prime Collaboration.\r\n\r\n Prime Collaboration Provisioning Release First Fixed Release for This Vulnerability Prior to 12.5\r\n Vulnerable; migrate to 12.5\r\n 12.5 12.5\r\n\r\nPrime License Manager: CSCvi31807 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvi31807\"]\r\n\r\nThe Prime License Manager Software can be downloaded from the Software Center [\"https://software.cisco.com/download/navigator.html\"] on Cisco.com by navigating to Products \u003e Unified Communications \u003e Unified Communications Management \u003e Prime License Manager \u003e Prime License Manager Software Updates.\r\n\r\n Prime License Manager Release First Fixed Release for This Vulnerability Prior to 10.5\r\n Vulnerable; migrate to plm_10_5_2 - 10.5.2.13001-11 10.5\r\n plm_10_5_2 - 10.5.2.13001-1\r\n 11.0 Vulnerable; migrate to 11.5(1)SU5\r\n 11.5 11.5(1)SU5\r\n\r\nSocialMiner: CSCvi29544 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvi29544\"]\r\n\r\nThe SocialMiner Software can be downloaded from the Software Center [\"https://software.cisco.com/download/navigator.html\"] on Cisco.com by navigating to Products \u003e Customer Collaboration \u003e Options for Contact Center Solutions \u003e SocialMiner \u003e SocialMiner Software.\r\n SocialMiner Release First Fixed Release for This Vulnerability Prior to 11.6\r\n Vulnerable; migrate to 11.6.1\r\n 11.6 11.6.1\r\n Unified Communications Manager and Unified Communication Manager Session Management Edition: CSCvd10872 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvd10872\"]\r\n\r\nThe Unified Communications Manager Software can be downloaded from the Software Center [\"https://software.cisco.com/download/navigator.html\"] on Cisco.com by navigating to Products \u003e Unified Communications \u003e Call Control \u003e Unified Communications Manager (CallManager).\r\n Unified Communications Manager Release First Fixed Release for This Vulnerability Prior to 10.0\r\n Vulnerable; migrate to 10.5(2)SU5 or later\r\n 10.0\r\n Vulnerable; migrate to 10.5(2)SU5 or later\r\n 10.5 10.5(2)SU5\r\n 11.0 11.0(1a)SU4\r\n 11.5 11.5(1)SU3\r\n 12.0 Not vulnerable\r\n\r\n Unified Communications Manager IM and Presence Service: CSCvi29543 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvi29543\"]\r\n\r\nThe Unified Communications Manager IM and Presence Service Software can be downloaded from the Software Center [\"https://software.cisco.com/download/navigator.html\"] on Cisco.com by navigating to Products \u003e Unified Communications \u003e Unified Communications Applications \u003e Presence Software \u003e Unified Communications Manager IM \u0026 Presence Service.\r\n Unified Communications Manager IM and Presence Service Release First Fixed Release for This Vulnerability Prior to 10.5\r\n Vulnerable; migrate to 10.5.2 SU4\r\n 10.5\r\n 10.5.2SU4\r\n 11.0 Vulnerable; migrate to 11.5(1)SU4\r\n 11.5 11.5(1)SU4\r\n\r\n Unified Contact Center Express: CSCvi29538 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvi29538\"]\r\n\r\n The Unified Contact Center Express Software can be downloaded from the Software Center [\"https://software.cisco.com/download/navigator.html\"] on Cisco.com by navigating to Products \u003e Customer Collaboration \u003e Options for Contact Center Solutions \u003e Unified IP Interactive Voice Response (IVR).\r\n\r\n Unified Contact Center Express Release First Fixed Release for This Vulnerability Prior to 11.6\r\n Vulnerable; migrate to 11.6(1)\r\n 11.6 11.6(1)\r\n\r\n Unified Intelligence Center: CSCvi29571 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvi29571\"]\r\n\r\nThe Unified Intelligence Center Software can be downloaded from the Software Center [\"https://software.cisco.com/download/navigator.html\"] on Cisco.com by navigating to Products \u003e Customer Collaboration \u003e Options for Contact Center Solutions \u003e Unified Intelligence Center \u003e Unified Intelligence Center Software.\r\n Unified Intelligence Center Release First Fixed Release for This Vulnerability Prior to 11.6\r\n Vulnerable; migrate to 11(6).1\r\n 11.6 11.6(1)\r\n\r\n Unity Connection: CSCvf64332 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvf64332\"]\r\n\r\nThe Unity Connection Software can be downloaded from the Software Center [\"https://software.cisco.com/download/navigator.html\"] on Cisco.com by navigating to Products \u003e Unified Communications \u003e Unified Communications Applications \u003e Messaging \u003e Unity Connection.\r\n Unity Connection Release First Fixed Release for This Vulnerability Prior to 10.5\r\n Vulnerable; migrate to 10.5SU5\r\n 10.5\r\n 10.5SU5\r\n 11.0 Vulnerable; migrate to 11.5(1)SU3\r\n 11.5 11.5.1SU3\r\n 12.0 Not vulnerable\r\n\r\nVirtualized Voice Browser: CSCvi31823 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvi31823\"]\r\n\r\nThe Virtualized Voice Browser Software can be downloaded from the Software Center [\"https://software.cisco.com/download/navigator.html\"] on Cisco.com by navigating to Products \u003e Customer Collaboration \u003e Options for Contact Center Solutions \u003e Virtualized Voice Browser.\r\n Virtualized Voice Browser Release First Fixed Release for This Vulnerability Prior to 11.6\r\n Vulnerable; migrate to 11.6(1)\r\n 11.6 11.6(1)",
"title": "Fixed Software"
},
{
"category": "general",
"text": "To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html\"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.",
"title": "Vulnerability Policy"
},
{
"category": "general",
"text": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.",
"title": "Exploitation and Public Announcements"
},
{
"category": "general",
"text": "This vulnerability was found during the resolution of a Cisco TAC support case.",
"title": "Source"
},
{
"category": "legal_disclaimer",
"text": "THIS DOCUMENT IS PROVIDED ON AN \"AS IS\" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.\r\n\r\nA standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products.",
"title": "Legal Disclaimer"
}
],
"publisher": {
"category": "vendor",
"contact_details": "Emergency Support:\r\n+1 877 228 7302 (toll-free within North America)\r\n+1 408 525 6532 (International direct-dial)\r\nNon-emergency Support:\r\nEmail: psirt@cisco.com\r\nSupport requests that are received via e-mail are typically acknowledged within 48 hours.",
"issuing_authority": "Cisco product security incident response is the responsibility of the Cisco Product Security Incident Response Team (PSIRT). The Cisco PSIRT is a dedicated, global team that manages the receipt, investigation, and public reporting of security vulnerability information that is related to Cisco products and networks. The on-call Cisco PSIRT works 24x7 with Cisco customers, independent security researchers, consultants, industry organizations, and other vendors to identify possible security issues with Cisco products and networks.\r\nMore information can be found in Cisco Security Vulnerability Policy available at https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html",
"name": "Cisco",
"namespace": "https://wwww.cisco.com"
},
"references": [
{
"category": "self",
"summary": "Multiple Cisco Products Disk Utilization Denial of Service Vulnerability",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-diskdos"
},
{
"category": "external",
"summary": "Cisco Security Vulnerability Policy",
"url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html"
},
{
"category": "external",
"summary": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-diskdos",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-diskdos"
},
{
"category": "external",
"summary": "https://www.cisco.com/c/en/us/products/end-user-license-agreement.html",
"url": "https://www.cisco.com/c/en/us/products/end-user-license-agreement.html"
},
{
"category": "external",
"summary": "Cisco Security Advisories and Alerts page",
"url": "http://www.cisco.com/go/psirt"
},
{
"category": "external",
"summary": "https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html",
"url": "https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html"
},
{
"category": "external",
"summary": "CSCvf64322",
"url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvf64322"
},
{
"category": "external",
"summary": "Software Center",
"url": "https://software.cisco.com/download/navigator.html"
},
{
"category": "external",
"summary": "Software Center",
"url": "https://software.cisco.com/download/navigator.html"
},
{
"category": "external",
"summary": "CSCvi29556",
"url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvi29556"
},
{
"category": "external",
"summary": "Software Center",
"url": "https://software.cisco.com/download/navigator.html"
},
{
"category": "external",
"summary": "CSCvi31738",
"url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvi31738"
},
{
"category": "external",
"summary": "Software Center",
"url": "https://software.cisco.com/download/navigator.html"
},
{
"category": "external",
"summary": "CSCvi29546",
"url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvi29546"
},
{
"category": "external",
"summary": "Software Center",
"url": "https://software.cisco.com/download/navigator.html"
},
{
"category": "external",
"summary": "CSCvi31818",
"url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvi31818"
},
{
"category": "external",
"summary": "Software Center",
"url": "https://software.cisco.com/download/navigator.html"
},
{
"category": "external",
"summary": "CSCvi31741",
"url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvi31741"
},
{
"category": "external",
"summary": "Software Center",
"url": "https://software.cisco.com/download/navigator.html"
},
{
"category": "external",
"summary": "CSCvi31807",
"url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvi31807"
},
{
"category": "external",
"summary": "Software Center",
"url": "https://software.cisco.com/download/navigator.html"
},
{
"category": "external",
"summary": "CSCvi29544",
"url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvi29544"
},
{
"category": "external",
"summary": "Software Center",
"url": "https://software.cisco.com/download/navigator.html"
},
{
"category": "external",
"summary": "CSCvd10872",
"url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvd10872"
},
{
"category": "external",
"summary": "Software Center",
"url": "https://software.cisco.com/download/navigator.html"
},
{
"category": "external",
"summary": "CSCvi29543",
"url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvi29543"
},
{
"category": "external",
"summary": "Software Center",
"url": "https://software.cisco.com/download/navigator.html"
},
{
"category": "external",
"summary": "CSCvi29538",
"url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvi29538"
},
{
"category": "external",
"summary": "Software Center",
"url": "https://software.cisco.com/download/navigator.html"
},
{
"category": "external",
"summary": "CSCvi29571",
"url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvi29571"
},
{
"category": "external",
"summary": "Software Center",
"url": "https://software.cisco.com/download/navigator.html"
},
{
"category": "external",
"summary": "CSCvf64332",
"url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvf64332"
},
{
"category": "external",
"summary": "Software Center",
"url": "https://software.cisco.com/download/navigator.html"
},
{
"category": "external",
"summary": "CSCvi31823",
"url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvi31823"
},
{
"category": "external",
"summary": "Software Center",
"url": "https://software.cisco.com/download/navigator.html"
},
{
"category": "external",
"summary": "Security Vulnerability Policy",
"url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html"
}
],
"title": "Multiple Cisco Products Disk Utilization Denial of Service Vulnerability",
"tracking": {
"current_release_date": "2018-07-02T14:32:00+00:00",
"generator": {
"date": "2022-09-03T03:08:40+00:00",
"engine": {
"name": "TVCE"
}
},
"id": "cisco-sa-20180606-diskdos",
"initial_release_date": "2018-06-06T16:00:00+00:00",
"revision_history": [
{
"date": "2018-06-06T15:06:46+00:00",
"number": "1.0.0",
"summary": "Initial public release."
},
{
"date": "2018-07-02T14:32:47+00:00",
"number": "1.1.0",
"summary": "Updated the Fixed Release table for Prime License Manager."
}
],
"status": "final",
"version": "1.1.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_family",
"name": "Cisco Emergency Responder",
"product": {
"name": "Cisco Emergency Responder ",
"product_id": "CSAFPID-4844"
}
},
{
"category": "product_family",
"name": "Cisco Unity Connection",
"product": {
"name": "Cisco Unity Connection ",
"product_id": "CSAFPID-73608"
}
},
{
"category": "product_family",
"name": "Cisco Unified Communications Manager",
"product": {
"name": "Cisco Unified Communications Manager ",
"product_id": "CSAFPID-88444"
}
},
{
"category": "product_family",
"name": "Cisco Unified Contact Center Express",
"product": {
"name": "Cisco Unified Contact Center Express ",
"product_id": "CSAFPID-92631"
}
},
{
"category": "product_family",
"name": "Cisco Unified Communications Manager IM and Presence Service",
"product": {
"name": "Cisco Unified Communications Manager IM and Presence Service ",
"product_id": "CSAFPID-189784"
}
},
{
"category": "product_family",
"name": "Cisco Finesse",
"product": {
"name": "Cisco Finesse ",
"product_id": "CSAFPID-193469"
}
},
{
"category": "product_family",
"name": "Cisco SocialMiner",
"product": {
"name": "Cisco SocialMiner ",
"product_id": "CSAFPID-194456"
}
},
{
"category": "product_family",
"name": "Cisco MediaSense",
"product": {
"name": "Cisco MediaSense ",
"product_id": "CSAFPID-194833"
}
},
{
"category": "product_family",
"name": "Cisco Unified Intelligence Center",
"product": {
"name": "Cisco Unified Intelligence Center ",
"product_id": "CSAFPID-198393"
}
},
{
"category": "product_family",
"name": "Cisco Prime License Manager",
"product": {
"name": "Cisco Prime License Manager ",
"product_id": "CSAFPID-203607"
}
},
{
"category": "product_family",
"name": "Cisco Prime Collaboration Deployment",
"product": {
"name": "Cisco Prime Collaboration Deployment ",
"product_id": "CSAFPID-203614"
}
},
{
"category": "product_family",
"name": "Cisco Prime Collaboration Assurance",
"product": {
"name": "Cisco Prime Collaboration Assurance ",
"product_id": "CSAFPID-209582"
}
},
{
"category": "product_family",
"name": "Cisco Prime Collaboration Provisioning",
"product": {
"name": "Cisco Prime Collaboration Provisioning ",
"product_id": "CSAFPID-209583"
}
},
{
"category": "product_family",
"name": "Cisco Hosted Collaboration Mediation Fulfillment",
"product": {
"name": "Cisco Hosted Collaboration Mediation Fulfillment ",
"product_id": "CSAFPID-220254"
}
},
{
"category": "product_family",
"name": "Cisco Virtualized Voice Browser",
"product": {
"name": "Cisco Virtualized Voice Browser ",
"product_id": "CSAFPID-233658"
}
}
],
"category": "vendor",
"name": "Cisco"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2017-6779",
"ids": [
{
"system_name": "Cisco Bug ID",
"text": "CSCvd10872"
},
{
"system_name": "Cisco Bug ID",
"text": "CSCvf64322"
},
{
"system_name": "Cisco Bug ID",
"text": "CSCvf64332"
},
{
"system_name": "Cisco Bug ID",
"text": "CSCvi29543"
},
{
"system_name": "Cisco Bug ID",
"text": "CSCvi31807"
},
{
"system_name": "Cisco Bug ID",
"text": "CSCvi31738"
},
{
"system_name": "Cisco Bug ID",
"text": "CSCvi29538"
},
{
"system_name": "Cisco Bug ID",
"text": "CSCvi29544"
},
{
"system_name": "Cisco Bug ID",
"text": "CSCvi29571"
},
{
"system_name": "Cisco Bug ID",
"text": "CSCvi29556"
},
{
"system_name": "Cisco Bug ID",
"text": "CSCvi29546"
},
{
"system_name": "Cisco Bug ID",
"text": "CSCvi31762"
},
{
"system_name": "Cisco Bug ID",
"text": "CSCvi31741"
},
{
"system_name": "Cisco Bug ID",
"text": "CSCvi31818"
},
{
"system_name": "Cisco Bug ID",
"text": "CSCvi31823"
}
],
"notes": [
{
"category": "other",
"text": "Complete.",
"title": "Affected Product Comprehensiveness"
}
],
"product_status": {
"known_affected": [
"CSAFPID-88444",
"CSAFPID-4844",
"CSAFPID-73608",
"CSAFPID-189784",
"CSAFPID-203607",
"CSAFPID-220254",
"CSAFPID-92631",
"CSAFPID-194456",
"CSAFPID-198393",
"CSAFPID-193469",
"CSAFPID-194833",
"CSAFPID-203614",
"CSAFPID-209583",
"CSAFPID-209582",
"CSAFPID-233658"
]
},
"release_date": "2018-06-06T16:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "Cisco has released software updates that address this vulnerability.",
"product_ids": [
"CSAFPID-73608",
"CSAFPID-194833",
"CSAFPID-4844",
"CSAFPID-203607",
"CSAFPID-209582",
"CSAFPID-88444",
"CSAFPID-92631",
"CSAFPID-209583",
"CSAFPID-220254",
"CSAFPID-233658",
"CSAFPID-189784",
"CSAFPID-198393",
"CSAFPID-193469",
"CSAFPID-194456",
"CSAFPID-203614"
],
"url": "https://software.cisco.com"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"CSAFPID-88444",
"CSAFPID-4844",
"CSAFPID-73608",
"CSAFPID-189784",
"CSAFPID-203607",
"CSAFPID-220254",
"CSAFPID-92631",
"CSAFPID-194456",
"CSAFPID-198393",
"CSAFPID-193469",
"CSAFPID-194833",
"CSAFPID-203614",
"CSAFPID-209583",
"CSAFPID-209582",
"CSAFPID-233658"
]
}
],
"title": "Cisco Unified Communications Manager, Emergency Responder, and Unity Connection Disk Utilization Denial of Service Vulnerability"
}
]
}
目前厂商已发布升级补丁以修复漏洞,补丁获取链接: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-diskdos
| Name | ['Cisco Unified Presence', 'Cisco Finesse', 'Cisco SocialMiner', 'Cisco MediaSense', 'Cisco Unity Connection', 'Cisco Prime Collaboration Provisioning', 'Cisco Prime Collaboration Assurance', 'Cisco Unified Intelligence Center', 'Cisco Hosted Collaboration Mediation Fulfillment', 'Cisco Emergency Responder', 'Cisco Unified Communications Manager (UCM) 0', 'Cisco Unified Contact Center Express', 'Cisco Prime License Manager', 'Cisco Unified Communications Manager IM and Presence Service (IM&P)', 'Cisco Unified Communication Manager Session Management Edition (SME)', 'Cisco Virtualized Voice Browser'] |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2017-6779"
}
},
"description": "Cisco Emergency Responder\u7b49\u90fd\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Cisco Emergency Responder\u662f\u4e00\u5957IP\u901a\u4fe1\u7cfb\u7edf\u4e2d\u7684\u5e94\u6025\u547c\u53eb\u8f6f\u4ef6\u3002Finesse\u662f\u4e00\u5957\u4e0b\u4e00\u4ee3\u5ba2\u6237\u534f\u4f5c\u670d\u52a1\u89e3\u51b3\u65b9\u6848\u3002\r\n\r\n\u591a\u6b3eCisco\u4ea7\u54c1\u4e2d\u672c\u5730\u6587\u4ef6\u7684\u7ba1\u7406\uff08\u7528\u4e8e\u5bf9\u7cfb\u7edf\u65e5\u5fd7\u6587\u4ef6\u7684\u7ba1\u7406\uff09\u5b58\u5728\u8d44\u6e90\u7ba1\u7406\u9519\u8bef\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u6ca1\u6709\u9650\u5236\u7cfb\u7edf\u65e5\u5fd7\u6587\u4ef6\u7684\u6700\u5927\u503c\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u5411\u8bbe\u5907\u53d1\u9001\u8fdc\u7a0b\u8fde\u63a5\u8bf7\u6c42\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u78c1\u76d8\u5927\u91cf\u5360\u7528\uff0c\u9020\u6210\u62d2\u7edd\u670d\u52a1\u3002",
"discovererName": "Cisco",
"formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-diskdos",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2018-11346",
"openTime": "2018-06-12",
"patchDescription": "Cisco Emergency Responder\u7b49\u90fd\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Cisco Emergency Responder\u662f\u4e00\u5957IP\u901a\u4fe1\u7cfb\u7edf\u4e2d\u7684\u5e94\u6025\u547c\u53eb\u8f6f\u4ef6\u3002Finesse\u662f\u4e00\u5957\u4e0b\u4e00\u4ee3\u5ba2\u6237\u534f\u4f5c\u670d\u52a1\u89e3\u51b3\u65b9\u6848\u3002\r\n\r\n\u591a\u6b3eCisco\u4ea7\u54c1\u4e2d\u672c\u5730\u6587\u4ef6\u7684\u7ba1\u7406\uff08\u7528\u4e8e\u5bf9\u7cfb\u7edf\u65e5\u5fd7\u6587\u4ef6\u7684\u7ba1\u7406\uff09\u5b58\u5728\u8d44\u6e90\u7ba1\u7406\u9519\u8bef\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u6ca1\u6709\u9650\u5236\u7cfb\u7edf\u65e5\u5fd7\u6587\u4ef6\u7684\u6700\u5927\u503c\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u5411\u8bbe\u5907\u53d1\u9001\u8fdc\u7a0b\u8fde\u63a5\u8bf7\u6c42\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u78c1\u76d8\u5927\u91cf\u5360\u7528\uff0c\u9020\u6210\u62d2\u7edd\u670d\u52a1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "\u591a\u6b3eCisco\u4ea7\u54c1\u8d44\u6e90\u7ba1\u7406\u9519\u8bef\u6f0f\u6d1e\u7684\u8865\u4e01",
"products": {
"product": [
"Cisco Unified Presence",
"Cisco Finesse",
"Cisco SocialMiner",
"Cisco MediaSense",
"Cisco Unity Connection",
"Cisco Prime Collaboration Provisioning",
"Cisco Prime Collaboration Assurance",
"Cisco Unified Intelligence Center",
"Cisco Hosted Collaboration Mediation Fulfillment",
"Cisco Emergency Responder",
"Cisco Unified Communications Manager (UCM) 0",
"Cisco Unified Contact Center Express",
"Cisco Prime License Manager",
"Cisco Unified Communications Manager IM and Presence Service (IM\u0026P\uff09",
"Cisco Unified Communication Manager Session Management Edition (SME)",
"Cisco Virtualized Voice Browser"
]
},
"referenceLink": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-diskdos",
"serverity": "\u9ad8",
"submitTime": "2018-06-12",
"title": "\u591a\u6b3eCisco\u4ea7\u54c1\u8d44\u6e90\u7ba1\u7406\u9519\u8bef\u6f0f\u6d1e"
}
FKIE_CVE-2017-6779
Vulnerability from fkie_nvd - Published: 2018-06-07 12:29 - Updated: 2025-07-31 15:03| Vendor | Product | Version | |
|---|---|---|---|
| cisco | emergency_responder | * | |
| cisco | emergency_responder | * | |
| cisco | emergency_responder | * | |
| cisco | emergency_responder | 11.0\(1.10000.10\) | |
| cisco | finesse | * | |
| cisco | finesse | 9.5\(1\) | |
| cisco | hosted_collaboration_mediation_fulfillment | * | |
| cisco | hosted_collaboration_mediation_fulfillment | 9.5\(1\) | |
| cisco | mediasense | * | |
| cisco | mediasense | 9.5\(1\) | |
| cisco | prime_collaboration_assurance | * | |
| cisco | prime_collaboration_assurance | * | |
| cisco | prime_collaboration_provisioning | 12.5 | |
| cisco | prime_license_manager | * | |
| cisco | prime_license_manager | * | |
| cisco | socialminer | * | |
| cisco | unified_communications_manager | * | |
| cisco | unified_communications_manager | * | |
| cisco | unified_communications_manager | * | |
| cisco | unified_communications_manager | 10.5\(2.10000.5\) | |
| cisco | unified_communications_manager | 11.0\(1.10000.10\) | |
| cisco | unified_communications_manager | 11.5\(1.10000.6\) | |
| cisco | unified_communications_manager | 12.0 | |
| cisco | unified_contact_center_express | * | |
| cisco | unified_contact_center_express | 9.0\(2\)su1.3 | |
| cisco | unified_intelligence_center | * | |
| cisco | unified_intelligence_center | 9.5\(1\) | |
| cisco | unity_connection | * | |
| cisco | unity_connection | * | |
| cisco | unity_connection | 9.5\(0.9\)tt0 | |
| cisco | unity_connection | 12.0 | |
| cisco | virtualized_voice_browser | * |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:emergency_responder:*:*:*:*:*:*:*:*",
"matchCriteriaId": "57F71C50-5AEA-4C57-B40D-BD175CE99F61",
"versionEndExcluding": "10.5\\(1a\\)",
"versionStartIncluding": "10.5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:emergency_responder:*:*:*:*:*:*:*:*",
"matchCriteriaId": "EADE21CC-8C70-4270-9431-30C4213A8115",
"versionEndExcluding": "11.5\\(4\\)",
"versionStartIncluding": "11.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:emergency_responder:*:*:*:*:*:*:*:*",
"matchCriteriaId": "650A41E1-9A81-4C08-9DDF-9CDDC6E22202",
"versionEndExcluding": "12.0su1",
"versionStartIncluding": "12.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:emergency_responder:11.0\\(1.10000.10\\):*:*:*:*:*:*:*",
"matchCriteriaId": "6E73AED2-74FE-410F-835A-7BD9E5E6C7DE",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:finesse:*:*:*:*:*:*:*:*",
"matchCriteriaId": "17A01F3E-24B2-4FE4-8466-6DE2EFA0530C",
"versionEndExcluding": "11.5\\(3\\)",
"versionStartIncluding": "11.5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:finesse:9.5\\(1\\):*:*:*:*:*:*:*",
"matchCriteriaId": "359B9780-D7A7-467C-A665-573C62E981EB",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B834DBFE-9CB9-486C-8084-3735D0994D7F",
"versionEndExcluding": "11.5\\(3\\)",
"versionStartIncluding": "11.5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:9.5\\(1\\):*:*:*:*:*:*:*",
"matchCriteriaId": "2D3EAC03-CB4A-423D-95BF-D7AB258CE2E0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:mediasense:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8CEF5671-AEB6-442B-8D9F-242447410512",
"versionEndExcluding": "11.5su2",
"versionStartIncluding": "11.5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:mediasense:9.5\\(1\\):*:*:*:*:*:*:*",
"matchCriteriaId": "37B3DC93-6772-4836-B969-3D8B0359D4AF",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:prime_collaboration_assurance:*:*:*:*:*:*:*:*",
"matchCriteriaId": "CB04C20D-B989-4B4D-B5F9-C2067CC886E1",
"versionEndExcluding": "11.6_es16",
"versionStartIncluding": "11.6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:prime_collaboration_assurance:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B92B3174-0187-4C3A-AFE7-2443FBAEA97E",
"versionEndExcluding": "12.1_es2",
"versionStartIncluding": "12.1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:prime_collaboration_provisioning:12.5:*:*:*:*:*:*:*",
"matchCriteriaId": "2BDA7BD5-70AE-431C-8E92-171A84BAA77F",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:prime_license_manager:*:*:*:*:*:*:*:*",
"matchCriteriaId": "FA9960C4-874D-44DF-B686-9039179378F4",
"versionEndExcluding": "10.5.2",
"versionStartIncluding": "10.5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:prime_license_manager:*:*:*:*:*:*:*:*",
"matchCriteriaId": "10FC0ED2-B2D2-4F52-B2B0-AC0DDCB430E9",
"versionEndExcluding": "11.5\\(1\\)su5",
"versionStartIncluding": "11.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:socialminer:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F8F4EDF5-67A4-42E1-BCB3-DB36A74C15A7",
"versionEndExcluding": "11.6.1",
"versionStartIncluding": "11.6",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
"matchCriteriaId": "DE65718F-D5E7-4FFA-985E-D0BCE395DBAE",
"versionEndExcluding": "10.5\\(2\\)su5",
"versionStartIncluding": "10.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
"matchCriteriaId": "CE99092A-3EB2-4F0B-8812-ECA6B67AA301",
"versionEndExcluding": "11.0\\(1a\\)su4",
"versionStartIncluding": "11.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8439C2DF-9F4B-40FE-8898-6331064026AA",
"versionEndExcluding": "11.5\\(1\\)su3",
"versionStartIncluding": "11.5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2.10000.5\\):*:*:*:*:*:*:*",
"matchCriteriaId": "520555C7-5E9B-4C76-AAB5-5DD8B29D18F0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_communications_manager:11.0\\(1.10000.10\\):*:*:*:*:*:*:*",
"matchCriteriaId": "F47282B9-8B76-40E0-B72C-A6A196A37A0C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1.10000.6\\):*:*:*:*:*:*:*",
"matchCriteriaId": "21BFC3A9-B6B1-49EE-A93A-6432BFE33E84",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_communications_manager:12.0:*:*:*:*:*:*:*",
"matchCriteriaId": "05BD68E4-4296-49ED-B789-60B935210C28",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:unified_contact_center_express:*:*:*:*:*:*:*:*",
"matchCriteriaId": "271E4847-9AF4-4DDC-82AB-3BE20F7A67F9",
"versionEndExcluding": "11.6\\(1\\)",
"versionStartIncluding": "11.6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_contact_center_express:9.0\\(2\\)su1.3:*:*:*:*:*:*:*",
"matchCriteriaId": "31FFF48A-B174-4FD6-9626-E81B5BAE3B43",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:unified_intelligence_center:*:*:*:*:*:*:*:*",
"matchCriteriaId": "30B24C3F-B602-42B6-95E8-C1E4B247A28D",
"versionEndExcluding": "11.6\\(1\\)",
"versionStartIncluding": "11.6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_intelligence_center:9.5\\(1\\):*:*:*:*:*:*:*",
"matchCriteriaId": "1D8337AC-7B8F-42E0-A714-ACD569C0CA77",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:unity_connection:*:*:*:*:*:*:*:*",
"matchCriteriaId": "4F1EF97D-52BC-4A60-9A73-09BFAAD05DAD",
"versionEndExcluding": "10.5su5",
"versionStartIncluding": "10.5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unity_connection:*:*:*:*:*:*:*:*",
"matchCriteriaId": "DFD34725-568D-4612-A84F-FF524D57F0E4",
"versionEndExcluding": "11.5.1su3",
"versionStartIncluding": "11.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unity_connection:9.5\\(0.9\\)tt0:*:*:*:*:*:*:*",
"matchCriteriaId": "0C5B4499-83A3-461B-AC8C-45BEABCBA1CE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unity_connection:12.0:*:*:*:*:*:*:*",
"matchCriteriaId": "65D225AB-813B-4182-8916-0FE8307BB18B",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:virtualized_voice_browser:*:*:*:*:*:*:*:*",
"matchCriteriaId": "A9928C83-6BEB-44AA-BB2E-AA2B9DC58BE4",
"versionEndExcluding": "11.6\\(1\\)",
"versionStartIncluding": "11.6",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability occurs because a certain system log file does not have a maximum size restriction. Therefore, the file is allowed to consume the majority of available disk space on the appliance. An attacker could exploit this vulnerability by sending crafted remote connection requests to the appliance. Successful exploitation could allow the attacker to increase the size of a system log file so that it consumes most of the disk space. The lack of available disk space could lead to a DoS condition in which the application functions could operate abnormally, making the appliance unstable. This vulnerability affects the following Cisco Voice Operating System (VOS)-based products: Emergency Responder, Finesse, Hosted Collaboration Mediation Fulfillment, MediaSense, Prime License Manager, SocialMiner, Unified Communications Manager (UCM), Unified Communications Manager IM and Presence Service (IM\u0026P - earlier releases were known as Cisco Unified Presence), Unified Communication Manager Session Management Edition (SME), Unified Contact Center Express (UCCx), Unified Intelligence Center (UIC), Unity Connection, Virtualized Voice Browser. This vulnerability also affects Prime Collaboration Assurance and Prime Collaboration Provisioning. Cisco Bug IDs: CSCvd10872, CSCvf64322, CSCvf64332, CSCvi29538, CSCvi29543, CSCvi29544, CSCvi29546, CSCvi29556, CSCvi29571, CSCvi31738, CSCvi31741, CSCvi31762, CSCvi31807, CSCvi31818, CSCvi31823."
},
{
"lang": "es",
"value": "M\u00faltiples productos Cisco se han visto afectados por una vulnerabilidad en la gesti\u00f3n de archivos locales para ciertos archivos de log del sistema de productos Cisco Collaboration que podr\u00edan permitir que un atacante remoto no autenticado provoque un gran uso del disco, lo que resulta en una condici\u00f3n de denegaci\u00f3n de servicio (DoS). La vulnerabilidad ocurre debido a que cierto archivo de registro del sistema no tiene una restricci\u00f3n de tama\u00f1o m\u00e1ximo. Por lo tanto, se permite que el archivo consuma la mayor\u00eda de espacio disponible en el dispositivo. Un atacante podr\u00eda explotar esta vulnerabilidad enviando peticiones de conexi\u00f3n remota manipuladas al dispositivo. La explotaci\u00f3n con \u00e9xito podr\u00eda permitir que el atacante aumente el tama\u00f1o de un archivo de log del sistema para que consuma casi todo el espacio del disco. La falta de espacio disponible en el disco podr\u00eda desembocar en una condici\u00f3n de denegaci\u00f3n de servicio (DoS) en la que las funciones de la aplicaci\u00f3n podr\u00edan operar de forma err\u00f3nea, haciendo que la aplicaci\u00f3n sea inestable. Esta vulnerabilidad afecta a los siguientes productos basados en Cisco Voice Operating System (VOS): Emergency Responder, Finesse, Hosted Collaboration Mediation Fulfillment, MediaSense, Prime License Manager, SocialMiner, Unified Communications Manager (UCM), Unified Communications Manager IM and Presence Service (IMP - earlier releases were known as Cisco Unified Presence), Unified Communication Manager Session Management Edition (SME), Unified Contact Center Express (UCCx), Unified Intelligence Center (UIC), Unity Connection y Virtualized Voice Browser. Esta vulnerabilidad tambi\u00e9n afecta a Prime Collaboration Assurance y Prime Collaboration Provisioning. Cisco Bug IDs: CSCvd10872, CSCvf64322, CSCvf64332, CSCvi29538, CSCvi29543, CSCvi29544, CSCvi29546, CSCvi29556, CSCvi29571, CSCvi31738, CSCvi31741, CSCvi31762, CSCvi31807, CSCvi31818 y CSCvi31823."
}
],
"id": "CVE-2017-6779",
"lastModified": "2025-07-31T15:03:24.870",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2018-06-07T12:29:00.260",
"references": [
{
"source": "psirt@cisco.com",
"tags": [
"Vendor Advisory"
],
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-diskdos"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-diskdos"
}
],
"sourceIdentifier": "psirt@cisco.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-399"
}
],
"source": "psirt@cisco.com",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-400"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-JFGW-VVCR-PV6Q
Vulnerability from github – Published: 2022-05-13 01:36 – Updated: 2022-05-13 01:36Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability occurs because a certain system log file does not have a maximum size restriction. Therefore, the file is allowed to consume the majority of available disk space on the appliance. An attacker could exploit this vulnerability by sending crafted remote connection requests to the appliance. Successful exploitation could allow the attacker to increase the size of a system log file so that it consumes most of the disk space. The lack of available disk space could lead to a DoS condition in which the application functions could operate abnormally, making the appliance unstable. This vulnerability affects the following Cisco Voice Operating System (VOS)-based products: Emergency Responder, Finesse, Hosted Collaboration Mediation Fulfillment, MediaSense, Prime License Manager, SocialMiner, Unified Communications Manager (UCM), Unified Communications Manager IM and Presence Service (IM&P - earlier releases were known as Cisco Unified Presence), Unified Communication Manager Session Management Edition (SME), Unified Contact Center Express (UCCx), Unified Intelligence Center (UIC), Unity Connection, Virtualized Voice Browser. This vulnerability also affects Prime Collaboration Assurance and Prime Collaboration Provisioning. Cisco Bug IDs: CSCvd10872, CSCvf64322, CSCvf64332, CSCvi29538, CSCvi29543, CSCvi29544, CSCvi29546, CSCvi29556, CSCvi29571, CSCvi31738, CSCvi31741, CSCvi31762, CSCvi31807, CSCvi31818, CSCvi31823.
{
"affected": [],
"aliases": [
"CVE-2017-6779"
],
"database_specific": {
"cwe_ids": [
"CWE-400"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2018-06-07T12:29:00Z",
"severity": "HIGH"
},
"details": "Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability occurs because a certain system log file does not have a maximum size restriction. Therefore, the file is allowed to consume the majority of available disk space on the appliance. An attacker could exploit this vulnerability by sending crafted remote connection requests to the appliance. Successful exploitation could allow the attacker to increase the size of a system log file so that it consumes most of the disk space. The lack of available disk space could lead to a DoS condition in which the application functions could operate abnormally, making the appliance unstable. This vulnerability affects the following Cisco Voice Operating System (VOS)-based products: Emergency Responder, Finesse, Hosted Collaboration Mediation Fulfillment, MediaSense, Prime License Manager, SocialMiner, Unified Communications Manager (UCM), Unified Communications Manager IM and Presence Service (IM\u0026P - earlier releases were known as Cisco Unified Presence), Unified Communication Manager Session Management Edition (SME), Unified Contact Center Express (UCCx), Unified Intelligence Center (UIC), Unity Connection, Virtualized Voice Browser. This vulnerability also affects Prime Collaboration Assurance and Prime Collaboration Provisioning. Cisco Bug IDs: CSCvd10872, CSCvf64322, CSCvf64332, CSCvi29538, CSCvi29543, CSCvi29544, CSCvi29546, CSCvi29556, CSCvi29571, CSCvi31738, CSCvi31741, CSCvi31762, CSCvi31807, CSCvi31818, CSCvi31823.",
"id": "GHSA-jfgw-vvcr-pv6q",
"modified": "2022-05-13T01:36:24Z",
"published": "2022-05-13T01:36:24Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-6779"
},
{
"type": "WEB",
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-diskdos"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
GSD-2017-6779
Vulnerability from gsd - Updated: 2023-12-13 01:21{
"GSD": {
"alias": "CVE-2017-6779",
"description": "Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability occurs because a certain system log file does not have a maximum size restriction. Therefore, the file is allowed to consume the majority of available disk space on the appliance. An attacker could exploit this vulnerability by sending crafted remote connection requests to the appliance. Successful exploitation could allow the attacker to increase the size of a system log file so that it consumes most of the disk space. The lack of available disk space could lead to a DoS condition in which the application functions could operate abnormally, making the appliance unstable. This vulnerability affects the following Cisco Voice Operating System (VOS)-based products: Emergency Responder, Finesse, Hosted Collaboration Mediation Fulfillment, MediaSense, Prime License Manager, SocialMiner, Unified Communications Manager (UCM), Unified Communications Manager IM and Presence Service (IM\u0026P - earlier releases were known as Cisco Unified Presence), Unified Communication Manager Session Management Edition (SME), Unified Contact Center Express (UCCx), Unified Intelligence Center (UIC), Unity Connection, Virtualized Voice Browser. This vulnerability also affects Prime Collaboration Assurance and Prime Collaboration Provisioning. Cisco Bug IDs: CSCvd10872, CSCvf64322, CSCvf64332, CSCvi29538, CSCvi29543, CSCvi29544, CSCvi29546, CSCvi29556, CSCvi29571, CSCvi31738, CSCvi31741, CSCvi31762, CSCvi31807, CSCvi31818, CSCvi31823.",
"id": "GSD-2017-6779"
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2017-6779"
],
"details": "Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability occurs because a certain system log file does not have a maximum size restriction. Therefore, the file is allowed to consume the majority of available disk space on the appliance. An attacker could exploit this vulnerability by sending crafted remote connection requests to the appliance. Successful exploitation could allow the attacker to increase the size of a system log file so that it consumes most of the disk space. The lack of available disk space could lead to a DoS condition in which the application functions could operate abnormally, making the appliance unstable. This vulnerability affects the following Cisco Voice Operating System (VOS)-based products: Emergency Responder, Finesse, Hosted Collaboration Mediation Fulfillment, MediaSense, Prime License Manager, SocialMiner, Unified Communications Manager (UCM), Unified Communications Manager IM and Presence Service (IM\u0026P - earlier releases were known as Cisco Unified Presence), Unified Communication Manager Session Management Edition (SME), Unified Contact Center Express (UCCx), Unified Intelligence Center (UIC), Unity Connection, Virtualized Voice Browser. This vulnerability also affects Prime Collaboration Assurance and Prime Collaboration Provisioning. Cisco Bug IDs: CSCvd10872, CSCvf64322, CSCvf64332, CSCvi29538, CSCvi29543, CSCvi29544, CSCvi29546, CSCvi29556, CSCvi29571, CSCvi31738, CSCvi31741, CSCvi31762, CSCvi31807, CSCvi31818, CSCvi31823.",
"id": "GSD-2017-6779",
"modified": "2023-12-13T01:21:09.434716Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "psirt@cisco.com",
"ID": "CVE-2017-6779",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Multiple Cisco Products unknown",
"version": {
"version_data": [
{
"version_value": "Multiple Cisco Products unknown"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability occurs because a certain system log file does not have a maximum size restriction. Therefore, the file is allowed to consume the majority of available disk space on the appliance. An attacker could exploit this vulnerability by sending crafted remote connection requests to the appliance. Successful exploitation could allow the attacker to increase the size of a system log file so that it consumes most of the disk space. The lack of available disk space could lead to a DoS condition in which the application functions could operate abnormally, making the appliance unstable. This vulnerability affects the following Cisco Voice Operating System (VOS)-based products: Emergency Responder, Finesse, Hosted Collaboration Mediation Fulfillment, MediaSense, Prime License Manager, SocialMiner, Unified Communications Manager (UCM), Unified Communications Manager IM and Presence Service (IM\u0026P - earlier releases were known as Cisco Unified Presence), Unified Communication Manager Session Management Edition (SME), Unified Contact Center Express (UCCx), Unified Intelligence Center (UIC), Unity Connection, Virtualized Voice Browser. This vulnerability also affects Prime Collaboration Assurance and Prime Collaboration Provisioning. Cisco Bug IDs: CSCvd10872, CSCvf64322, CSCvf64332, CSCvi29538, CSCvi29543, CSCvi29544, CSCvi29546, CSCvi29556, CSCvi29571, CSCvi31738, CSCvi31741, CSCvi31762, CSCvi31807, CSCvi31818, CSCvi31823."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-399"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-diskdos",
"refsource": "CONFIRM",
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-diskdos"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:cisco:emergency_responder:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "11.5\\(4\\)",
"versionStartIncluding": "11.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:emergency_responder:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "12.0su1",
"versionStartIncluding": "12.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:emergency_responder:11.0\\(1.10000.10\\):*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:emergency_responder:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "10.5\\(1a\\)",
"versionStartIncluding": "10.5",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:cisco:finesse:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "11.5\\(3\\)",
"versionStartIncluding": "11.5",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:finesse:9.5\\(1\\):*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "11.5\\(3\\)",
"versionStartIncluding": "11.5",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:9.5\\(1\\):*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:cisco:mediasense:9.5\\(1\\):*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:mediasense:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "11.5su2",
"versionStartIncluding": "11.5",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:cisco:prime_collaboration_assurance:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "11.6_es16",
"versionStartIncluding": "11.6",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:prime_collaboration_assurance:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "12.1_es2",
"versionStartIncluding": "12.1",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:cisco:prime_collaboration_provisioning:12.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:cisco:prime_license_manager:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "11.5\\(1\\)su5",
"versionStartIncluding": "11.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:prime_license_manager:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "10.5.2",
"versionStartIncluding": "10.5",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:cisco:socialminer:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "11.6.1",
"versionStartIncluding": "11.6",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "11.5\\(1\\)su3",
"versionStartIncluding": "11.5",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:unified_communications_manager:12.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "11.0\\(1a\\)su4",
"versionStartIncluding": "11.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2.10000.5\\):*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:unified_communications_manager:11.0\\(1.10000.10\\):*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1.10000.6\\):*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "10.5\\(2\\)su5",
"versionStartIncluding": "10.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:cisco:unified_contact_center_express:9.0\\(2\\)su1.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:unified_contact_center_express:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "11.6\\(1\\)",
"versionStartIncluding": "11.6",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:cisco:unified_intelligence_center:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "11.6\\(1\\)",
"versionStartIncluding": "11.6",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:cisco:unified_intelligence_center:9.5\\(1\\):*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:cisco:unity_connection:12.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:unity_connection:9.5\\(0.9\\)tt0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:unity_connection:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "10.5su5",
"versionStartIncluding": "10.5",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:unity_connection:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "11.5.1su3",
"versionStartIncluding": "11.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:cisco:virtualized_voice_browser:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "11.6\\(1\\)",
"versionStartIncluding": "11.6",
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "psirt@cisco.com",
"ID": "CVE-2017-6779"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability occurs because a certain system log file does not have a maximum size restriction. Therefore, the file is allowed to consume the majority of available disk space on the appliance. An attacker could exploit this vulnerability by sending crafted remote connection requests to the appliance. Successful exploitation could allow the attacker to increase the size of a system log file so that it consumes most of the disk space. The lack of available disk space could lead to a DoS condition in which the application functions could operate abnormally, making the appliance unstable. This vulnerability affects the following Cisco Voice Operating System (VOS)-based products: Emergency Responder, Finesse, Hosted Collaboration Mediation Fulfillment, MediaSense, Prime License Manager, SocialMiner, Unified Communications Manager (UCM), Unified Communications Manager IM and Presence Service (IM\u0026P - earlier releases were known as Cisco Unified Presence), Unified Communication Manager Session Management Edition (SME), Unified Contact Center Express (UCCx), Unified Intelligence Center (UIC), Unity Connection, Virtualized Voice Browser. This vulnerability also affects Prime Collaboration Assurance and Prime Collaboration Provisioning. Cisco Bug IDs: CSCvd10872, CSCvf64322, CSCvf64332, CSCvi29538, CSCvi29543, CSCvi29544, CSCvi29546, CSCvi29556, CSCvi29571, CSCvi31738, CSCvi31741, CSCvi31762, CSCvi31807, CSCvi31818, CSCvi31823."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-400"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-diskdos",
"refsource": "CONFIRM",
"tags": [
"Vendor Advisory"
],
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-diskdos"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
},
"lastModifiedDate": "2019-10-09T23:29Z",
"publishedDate": "2018-06-07T12:29Z"
}
}
}
VAR-201806-0654
Vulnerability from variot - Updated: 2025-07-31 23:41Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability occurs because a certain system log file does not have a maximum size restriction. Therefore, the file is allowed to consume the majority of available disk space on the appliance. An attacker could exploit this vulnerability by sending crafted remote connection requests to the appliance. Successful exploitation could allow the attacker to increase the size of a system log file so that it consumes most of the disk space. The lack of available disk space could lead to a DoS condition in which the application functions could operate abnormally, making the appliance unstable. This vulnerability affects the following Cisco Voice Operating System (VOS)-based products: Emergency Responder, Finesse, Hosted Collaboration Mediation Fulfillment, MediaSense, Prime License Manager, SocialMiner, Unified Communications Manager (UCM), Unified Communications Manager IM and Presence Service (IM&P - earlier releases were known as Cisco Unified Presence), Unified Communication Manager Session Management Edition (SME), Unified Contact Center Express (UCCx), Unified Intelligence Center (UIC), Unity Connection, Virtualized Voice Browser. This vulnerability also affects Prime Collaboration Assurance and Prime Collaboration Provisioning. Cisco Bug IDs: CSCvd10872, CSCvf64322, CSCvf64332, CSCvi29538, CSCvi29543, CSCvi29544, CSCvi29546, CSCvi29556, CSCvi29571, CSCvi31738, CSCvi31741, CSCvi31762, CSCvi31807, CSCvi31818, CSCvi31823. plural Cisco The product is vulnerable to resource exhaustion. Vendors have confirmed this vulnerability Bug ID CSCvd10872 , CSCvf64322 , CSCvf64332 , CSCvi29538 , CSCvi29543 , CSCvi29544 , CSCvi29546 , CSCvi29556 , CSCvi29571 , CSCvi31738 , CSCvi31741 , CSCvi31762 , CSCvi31807 , CSCvi31818 ,and CSCvi31823 It is released as.Service operation interruption (DoS) There is a possibility of being put into a state. Multiple Cisco Products are prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to consume disk resources, denying service to legitimate users. Cisco Emergency Responder, etc. are all products of Cisco (Cisco). Cisco Emergency Responder is an emergency call software in an IP communication system. Finesse is a next-generation customer collaboration service solution
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201806-0654",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "unified communications manager",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "12.0"
},
{
"model": "unified contact center express",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "9.0\\(2\\)su1.3"
},
{
"model": "unified communications manager",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "11.0\\(1.10000.10\\)"
},
{
"model": "unified communications manager",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "11.5\\(1.10000.6\\)"
},
{
"model": "unity connection",
"scope": "eq",
"trust": 1.3,
"vendor": "cisco",
"version": "12.0"
},
{
"model": "unified contact center express",
"scope": "lt",
"trust": 1.0,
"vendor": "cisco",
"version": "11.6\\(1\\)"
},
{
"model": "prime collaboration assurance",
"scope": "gte",
"trust": 1.0,
"vendor": "cisco",
"version": "12.1"
},
{
"model": "unified communications manager",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "10.5\\(2.10000.5\\)"
},
{
"model": "emergency responder",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "11.0\\(1.10000.10\\)"
},
{
"model": "emergency responder",
"scope": "lt",
"trust": 1.0,
"vendor": "cisco",
"version": "10.5\\(1a\\)"
},
{
"model": "mediasense",
"scope": "lt",
"trust": 1.0,
"vendor": "cisco",
"version": "11.5su2"
},
{
"model": "emergency responder",
"scope": "lt",
"trust": 1.0,
"vendor": "cisco",
"version": "11.5\\(4\\)"
},
{
"model": "unified intelligence center",
"scope": "gte",
"trust": 1.0,
"vendor": "cisco",
"version": "11.6"
},
{
"model": "unity connection",
"scope": "lt",
"trust": 1.0,
"vendor": "cisco",
"version": "11.5.1su3"
},
{
"model": "virtualized voice browser",
"scope": "lt",
"trust": 1.0,
"vendor": "cisco",
"version": "11.6\\(1\\)"
},
{
"model": "prime collaboration assurance",
"scope": "gte",
"trust": 1.0,
"vendor": "cisco",
"version": "11.6"
},
{
"model": "hosted collaboration mediation fulfillment",
"scope": "lt",
"trust": 1.0,
"vendor": "cisco",
"version": "11.5\\(3\\)"
},
{
"model": "socialminer",
"scope": "gte",
"trust": 1.0,
"vendor": "cisco",
"version": "11.6"
},
{
"model": "mediasense",
"scope": "gte",
"trust": 1.0,
"vendor": "cisco",
"version": "11.5"
},
{
"model": "hosted collaboration mediation fulfillment",
"scope": "gte",
"trust": 1.0,
"vendor": "cisco",
"version": "11.5"
},
{
"model": "finesse",
"scope": "lt",
"trust": 1.0,
"vendor": "cisco",
"version": "11.5\\(3\\)"
},
{
"model": "finesse",
"scope": "gte",
"trust": 1.0,
"vendor": "cisco",
"version": "11.5"
},
{
"model": "hosted collaboration mediation fulfillment",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "9.5\\(1\\)"
},
{
"model": "mediasense",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "9.5\\(1\\)"
},
{
"model": "unified contact center express",
"scope": "gte",
"trust": 1.0,
"vendor": "cisco",
"version": "11.6"
},
{
"model": "virtualized voice browser",
"scope": "gte",
"trust": 1.0,
"vendor": "cisco",
"version": "11.6"
},
{
"model": "emergency responder",
"scope": "gte",
"trust": 1.0,
"vendor": "cisco",
"version": "11.0"
},
{
"model": "unified communications manager",
"scope": "gte",
"trust": 1.0,
"vendor": "cisco",
"version": "11.0"
},
{
"model": "finesse",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "9.5\\(1\\)"
},
{
"model": "prime collaboration assurance",
"scope": "lt",
"trust": 1.0,
"vendor": "cisco",
"version": "12.1_es2"
},
{
"model": "prime collaboration provisioning",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "12.5"
},
{
"model": "unified communications manager",
"scope": "gte",
"trust": 1.0,
"vendor": "cisco",
"version": "11.5"
},
{
"model": "emergency responder",
"scope": "gte",
"trust": 1.0,
"vendor": "cisco",
"version": "10.5"
},
{
"model": "prime collaboration assurance",
"scope": "lt",
"trust": 1.0,
"vendor": "cisco",
"version": "11.6_es16"
},
{
"model": "unified communications manager",
"scope": "lt",
"trust": 1.0,
"vendor": "cisco",
"version": "11.5\\(1\\)su3"
},
{
"model": "emergency responder",
"scope": "gte",
"trust": 1.0,
"vendor": "cisco",
"version": "12.0"
},
{
"model": "unity connection",
"scope": "gte",
"trust": 1.0,
"vendor": "cisco",
"version": "11.0"
},
{
"model": "prime license manager",
"scope": "gte",
"trust": 1.0,
"vendor": "cisco",
"version": "11.0"
},
{
"model": "unified intelligence center",
"scope": "lt",
"trust": 1.0,
"vendor": "cisco",
"version": "11.6\\(1\\)"
},
{
"model": "unified communications manager",
"scope": "gte",
"trust": 1.0,
"vendor": "cisco",
"version": "10.0"
},
{
"model": "unified intelligence center",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "9.5\\(1\\)"
},
{
"model": "unity connection",
"scope": "gte",
"trust": 1.0,
"vendor": "cisco",
"version": "10.5"
},
{
"model": "unified communications manager",
"scope": "lt",
"trust": 1.0,
"vendor": "cisco",
"version": "11.0\\(1a\\)su4"
},
{
"model": "prime license manager",
"scope": "lt",
"trust": 1.0,
"vendor": "cisco",
"version": "11.5\\(1\\)su5"
},
{
"model": "unity connection",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "9.5\\(0.9\\)tt0"
},
{
"model": "emergency responder",
"scope": "lt",
"trust": 1.0,
"vendor": "cisco",
"version": "12.0su1"
},
{
"model": "prime license manager",
"scope": "lt",
"trust": 1.0,
"vendor": "cisco",
"version": "10.5.2"
},
{
"model": "unified communications manager",
"scope": "lt",
"trust": 1.0,
"vendor": "cisco",
"version": "10.5\\(2\\)su5"
},
{
"model": "unity connection",
"scope": "lt",
"trust": 1.0,
"vendor": "cisco",
"version": "10.5su5"
},
{
"model": "socialminer",
"scope": "lt",
"trust": 1.0,
"vendor": "cisco",
"version": "11.6.1"
},
{
"model": "prime license manager",
"scope": "gte",
"trust": 1.0,
"vendor": "cisco",
"version": "10.5"
},
{
"model": "emergency responder software",
"scope": null,
"trust": 0.8,
"vendor": "cisco",
"version": null
},
{
"model": "finesse",
"scope": null,
"trust": 0.8,
"vendor": "cisco",
"version": null
},
{
"model": "hosted collaboration mediation fulfillment",
"scope": null,
"trust": 0.8,
"vendor": "cisco",
"version": null
},
{
"model": "mediasense",
"scope": null,
"trust": 0.8,
"vendor": "cisco",
"version": null
},
{
"model": "prime collaboration assurance",
"scope": null,
"trust": 0.8,
"vendor": "cisco",
"version": null
},
{
"model": "prime collaboration provisioning",
"scope": null,
"trust": 0.8,
"vendor": "cisco",
"version": null
},
{
"model": "prime license manager",
"scope": null,
"trust": 0.8,
"vendor": "cisco",
"version": null
},
{
"model": "socialminer",
"scope": null,
"trust": 0.8,
"vendor": "cisco",
"version": null
},
{
"model": "unified communications manager",
"scope": null,
"trust": 0.8,
"vendor": "cisco",
"version": null
},
{
"model": "unified contact center express",
"scope": null,
"trust": 0.8,
"vendor": "cisco",
"version": null
},
{
"model": "unified intelligence center",
"scope": null,
"trust": 0.8,
"vendor": "cisco",
"version": null
},
{
"model": "unity connection",
"scope": null,
"trust": 0.8,
"vendor": "cisco",
"version": null
},
{
"model": "virtualized voice browser",
"scope": null,
"trust": 0.8,
"vendor": "cisco",
"version": null
},
{
"model": "unified communications manager",
"scope": "eq",
"trust": 0.6,
"vendor": "cisco",
"version": "11.5\\(1.12000.1\\)"
},
{
"model": "unified communications manager",
"scope": "eq",
"trust": 0.6,
"vendor": "cisco",
"version": "11.5\\(0.98000.486\\)"
},
{
"model": "unified communications manager",
"scope": "eq",
"trust": 0.6,
"vendor": "cisco",
"version": "11.0\\(0.98000.225\\)"
},
{
"model": "unified communications manager",
"scope": "eq",
"trust": 0.6,
"vendor": "cisco",
"version": "11.5.0"
},
{
"model": "unified communications manager",
"scope": "eq",
"trust": 0.6,
"vendor": "cisco",
"version": "10.5\\(3.10000.9\\)"
},
{
"model": "unified communications manager",
"scope": "eq",
"trust": 0.6,
"vendor": "cisco",
"version": "11.5\\(0.98000.480\\)"
},
{
"model": "finesse 10.6 su1",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "hosted collaboration mediation fulfillment",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "11.5"
},
{
"model": "finesse",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "10.5(1)"
},
{
"model": "finesse 9.1 es3",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "finesse 10.5 su1.7",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "prime collaboration provisioning",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "11.2"
},
{
"model": "socialminer",
"scope": "ne",
"trust": 0.3,
"vendor": "cisco",
"version": "11.6(1)"
},
{
"model": "finesse",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "11.5(1)"
},
{
"model": "unified communications manager im and presence service su1",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "11.5(1)"
},
{
"model": "finesse 10.0 su1.1",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "prime collaboration provisioning",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "12.3"
},
{
"model": "finesse 9.1 es4",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "finesse 9.1 su1.1",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "unified communications manager im and presence service",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "9.0(1)"
},
{
"model": "unified communications manager im and presence service 10.5.2su4",
"scope": "ne",
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "prime collaboration assurance",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "10.0"
},
{
"model": "unified communications manager",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "prime collaboration assurance",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "9.5"
},
{
"model": "emergency responder 10.5",
"scope": "ne",
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "unified communications manager im and presence service su2",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "10.5(2)"
},
{
"model": "finesse",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "8.6(1)"
},
{
"model": "finesse",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "9.0(2)"
},
{
"model": "finesse 9.1 su1",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "mediasense",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "10.5(1)"
},
{
"model": "mediasense",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "11.5"
},
{
"model": "unified contact center express",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "11.6"
},
{
"model": "prime collaboration provisioning",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "10.5"
},
{
"model": "mediasense 9.0",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "finesse",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "8.5(5)"
},
{
"model": "unified intelligence center",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "11.5(1)"
},
{
"model": "unity connection",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "11.5"
},
{
"model": "unity connection",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "10.5"
},
{
"model": "unified communications manager im and presence service su2a",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "10.5(2)"
},
{
"model": "emergency responder",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "11.5"
},
{
"model": "finesse 9.1 es5",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "unified communications manager im and presence service 11.5 su4",
"scope": "ne",
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "unified communications manager im and presence service su6",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "9.1(1)"
},
{
"model": "socialminer",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "10.0(1)"
},
{
"model": "finesse 10.5 su1.1",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "finesse 10.5 es1",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "prime collaboration provisioning",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "10.5.1"
},
{
"model": "prime collaboration provisioning",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "11.1"
},
{
"model": "unified intelligence center es03",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "11.5(1)"
},
{
"model": "finesse 10.5 es2",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "unified communications manager im and presence service",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "10.5(1)"
},
{
"model": "finesse 9.1 es1",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "unified communications manager im and presence service",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "11.5(1)"
},
{
"model": "prime collaboration provisioning",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "11.5"
},
{
"model": "socialminer",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "9.0(1)"
},
{
"model": "prime collaboration assurance sp1",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "11.5"
},
{
"model": "socialminer",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "11.5.1"
},
{
"model": "finesse",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "8.5(4)"
},
{
"model": "mediasense",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "9.0"
},
{
"model": "finesse",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "10.6(1)"
},
{
"model": "finesse 10.5 es4",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "unified communications manager im and presence service mr1",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "10.5"
},
{
"model": "prime collaboration assurance",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "10.5"
},
{
"model": "emergency responder 12.0su1",
"scope": "ne",
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "finesse",
"scope": "ne",
"trust": 0.3,
"vendor": "cisco",
"version": "11.6(1)"
},
{
"model": "prime collaboration provisioning",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "11.6"
},
{
"model": "emergency responder",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "12.0"
},
{
"model": "finesse",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "10.0(1)"
},
{
"model": "unified contact center express",
"scope": "ne",
"trust": 0.3,
"vendor": "cisco",
"version": "11.6(1)"
},
{
"model": "finesse",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "8.5(3)"
},
{
"model": "prime collaboration assurance es2",
"scope": "ne",
"trust": 0.3,
"vendor": "cisco",
"version": "12.1"
},
{
"model": "unified communications manager im and presence service su7",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "9.1(1)"
},
{
"model": "unified communications manager im and presence service",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "9.1(2)"
},
{
"model": "mediasense",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "8.5(4)"
},
{
"model": "finesse",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "9.1(1)"
},
{
"model": "prime collaboration provisioning",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "10.6"
},
{
"model": "mediasense",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "9.1"
},
{
"model": "prime collaboration provisioning",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "11.0"
},
{
"model": "finesse",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "11.0(1)"
},
{
"model": "unified communications manager im and presence service su1",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "11.0(1)"
},
{
"model": "prime collaboration assurance",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "10.5.1"
},
{
"model": "prime license manager",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "11.5"
},
{
"model": "prime collaboration assurance",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "11.1"
},
{
"model": "finesse 9.1 es2",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "mediasense",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "10.0(1)"
},
{
"model": "finesse",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "9.0(1)"
},
{
"model": "finesse",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "8.5(1)"
},
{
"model": "mediasense 11.5su2",
"scope": "ne",
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "mediasense",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "8.5(3)"
},
{
"model": "unified intelligence center",
"scope": "ne",
"trust": 0.3,
"vendor": "cisco",
"version": "11.6(1)"
},
{
"model": "mediasense",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "9.1(1)"
},
{
"model": "finesse 10.5 es3",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "emergency responder",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "11.0"
},
{
"model": "unified intelligence center",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "10.0(1)"
},
{
"model": "prime collaboration provisioning",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "10.0"
},
{
"model": "prime collaboration assurance",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "10.5(1)"
},
{
"model": "prime collaboration assurance",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "11.5"
},
{
"model": "prime collaboration provisioning",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "12.2"
},
{
"model": "finesse es2",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "11.5"
},
{
"model": "finesse 10.5 su1",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "unity connection",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "10.0"
},
{
"model": "unity connection 11.5.1su3",
"scope": "ne",
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "prime collaboration assurance",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "9.0"
},
{
"model": "virtualized voice browser",
"scope": "ne",
"trust": 0.3,
"vendor": "cisco",
"version": "11.6(1)"
},
{
"model": "prime collaboration provisioning",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "12.1"
},
{
"model": "finesse 10.6 su2",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "mediasense",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "11.5.1"
},
{
"model": "finesse",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "8.5(2)"
},
{
"model": "prime collaboration assurance",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "11.6"
},
{
"model": "emergency responder",
"scope": "ne",
"trust": 0.3,
"vendor": "cisco",
"version": "11.5(4)"
},
{
"model": "finesse 10.0 su1",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "unified intelligence center 11.0 es10",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "unified communications manager im and presence service",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "10.5(2)"
},
{
"model": "prime collaboration assurance",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "10.6"
},
{
"model": "unified intelligence center",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "10.6(1)"
},
{
"model": "hosted collaboration mediation fulfillment",
"scope": "ne",
"trust": 0.3,
"vendor": "cisco",
"version": "11.5(3)"
},
{
"model": "unified communications manager im and presence service",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "9.1(1)"
},
{
"model": "prime collaboration assurance",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "11.0"
},
{
"model": "virtualized voice browser",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "unified communications manager im and presence service su6a",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "9.1(1)"
},
{
"model": "socialminer su1",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "11.5"
}
],
"sources": [
{
"db": "BID",
"id": "104662"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-013764"
},
{
"db": "CNNVD",
"id": "CNNVD-201806-404"
},
{
"db": "NVD",
"id": "CVE-2017-6779"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:cisco:emergency_responder",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:cisco:finesse",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:cisco:hosted_collaboration_mediation_fulfillment",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:cisco:mediasense",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:cisco:prime_collaboration_assurance",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:cisco:prime_collaboration_provisioning",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:cisco:prime_license_manager",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:cisco:socialminer",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:cisco:unified_communications_manager",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:cisco:unified_contact_center_express",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:cisco:unified_intelligence_center",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:cisco:unity_connection",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:cisco:virtualized_voice_browser",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-013764"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "The vendor reported this issue.",
"sources": [
{
"db": "BID",
"id": "104662"
}
],
"trust": 0.3
},
"cve": "CVE-2017-6779",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "CVE-2017-6779",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 1.9,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "VHN-114982",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:N/I:N/A:C",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"exploitabilityScore": 3.9,
"id": "CVE-2017-6779",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.8,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2017-6779",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2017-6779",
"trust": 0.8,
"value": "High"
},
{
"author": "CNNVD",
"id": "CNNVD-201806-404",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "VULHUB",
"id": "VHN-114982",
"trust": 0.1,
"value": "HIGH"
},
{
"author": "VULMON",
"id": "CVE-2017-6779",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-114982"
},
{
"db": "VULMON",
"id": "CVE-2017-6779"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-013764"
},
{
"db": "CNNVD",
"id": "CNNVD-201806-404"
},
{
"db": "NVD",
"id": "CVE-2017-6779"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability occurs because a certain system log file does not have a maximum size restriction. Therefore, the file is allowed to consume the majority of available disk space on the appliance. An attacker could exploit this vulnerability by sending crafted remote connection requests to the appliance. Successful exploitation could allow the attacker to increase the size of a system log file so that it consumes most of the disk space. The lack of available disk space could lead to a DoS condition in which the application functions could operate abnormally, making the appliance unstable. This vulnerability affects the following Cisco Voice Operating System (VOS)-based products: Emergency Responder, Finesse, Hosted Collaboration Mediation Fulfillment, MediaSense, Prime License Manager, SocialMiner, Unified Communications Manager (UCM), Unified Communications Manager IM and Presence Service (IM\u0026P - earlier releases were known as Cisco Unified Presence), Unified Communication Manager Session Management Edition (SME), Unified Contact Center Express (UCCx), Unified Intelligence Center (UIC), Unity Connection, Virtualized Voice Browser. This vulnerability also affects Prime Collaboration Assurance and Prime Collaboration Provisioning. Cisco Bug IDs: CSCvd10872, CSCvf64322, CSCvf64332, CSCvi29538, CSCvi29543, CSCvi29544, CSCvi29546, CSCvi29556, CSCvi29571, CSCvi31738, CSCvi31741, CSCvi31762, CSCvi31807, CSCvi31818, CSCvi31823. plural Cisco The product is vulnerable to resource exhaustion. Vendors have confirmed this vulnerability Bug ID CSCvd10872 , CSCvf64322 , CSCvf64332 , CSCvi29538 , CSCvi29543 , CSCvi29544 , CSCvi29546 , CSCvi29556 , CSCvi29571 , CSCvi31738 , CSCvi31741 , CSCvi31762 , CSCvi31807 , CSCvi31818 ,and CSCvi31823 It is released as.Service operation interruption (DoS) There is a possibility of being put into a state. Multiple Cisco Products are prone to a denial-of-service vulnerability. \nRemote attackers can exploit this issue to consume disk resources, denying service to legitimate users. Cisco Emergency Responder, etc. are all products of Cisco (Cisco). Cisco Emergency Responder is an emergency call software in an IP communication system. Finesse is a next-generation customer collaboration service solution",
"sources": [
{
"db": "NVD",
"id": "CVE-2017-6779"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-013764"
},
{
"db": "BID",
"id": "104662"
},
{
"db": "VULHUB",
"id": "VHN-114982"
},
{
"db": "VULMON",
"id": "CVE-2017-6779"
}
],
"trust": 2.07
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2017-6779",
"trust": 2.9
},
{
"db": "JVNDB",
"id": "JVNDB-2017-013764",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201806-404",
"trust": 0.7
},
{
"db": "BID",
"id": "104662",
"trust": 0.4
},
{
"db": "VULHUB",
"id": "VHN-114982",
"trust": 0.1
},
{
"db": "VULMON",
"id": "CVE-2017-6779",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-114982"
},
{
"db": "VULMON",
"id": "CVE-2017-6779"
},
{
"db": "BID",
"id": "104662"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-013764"
},
{
"db": "CNNVD",
"id": "CNNVD-201806-404"
},
{
"db": "NVD",
"id": "CVE-2017-6779"
}
]
},
"id": "VAR-201806-0654",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-114982"
}
],
"trust": 0.01
},
"last_update_date": "2025-07-31T23:41:22.821000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "cisco-sa-20180606-diskdos",
"trust": 0.8,
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-diskdos"
},
{
"title": "Multiple Cisco Product resource management error vulnerability fixes",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=80751"
},
{
"title": "Cisco: Multiple Cisco Products Disk Utilization Denial of Service Vulnerability",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=cisco_security_advisories_and_alerts_ciscoproducts\u0026qid=cisco-sa-20180606-diskdos"
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2017-6779"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-013764"
},
{
"db": "CNNVD",
"id": "CNNVD-201806-404"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-400",
"trust": 1.9
},
{
"problemtype": "CWE-399",
"trust": 1.0
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-114982"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-013764"
},
{
"db": "NVD",
"id": "CVE-2017-6779"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.2,
"url": "https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20180606-diskdos"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-6779"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-6779"
},
{
"trust": 0.3,
"url": "http://www.cisco.com/"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/400.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-114982"
},
{
"db": "VULMON",
"id": "CVE-2017-6779"
},
{
"db": "BID",
"id": "104662"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-013764"
},
{
"db": "CNNVD",
"id": "CNNVD-201806-404"
},
{
"db": "NVD",
"id": "CVE-2017-6779"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-114982"
},
{
"db": "VULMON",
"id": "CVE-2017-6779"
},
{
"db": "BID",
"id": "104662"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-013764"
},
{
"db": "CNNVD",
"id": "CNNVD-201806-404"
},
{
"db": "NVD",
"id": "CVE-2017-6779"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-06-07T00:00:00",
"db": "VULHUB",
"id": "VHN-114982"
},
{
"date": "2018-06-07T00:00:00",
"db": "VULMON",
"id": "CVE-2017-6779"
},
{
"date": "2018-06-06T00:00:00",
"db": "BID",
"id": "104662"
},
{
"date": "2018-08-09T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-013764"
},
{
"date": "2018-06-08T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201806-404"
},
{
"date": "2018-06-07T12:29:00.260000",
"db": "NVD",
"id": "CVE-2017-6779"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-10-09T00:00:00",
"db": "VULHUB",
"id": "VHN-114982"
},
{
"date": "2019-10-09T00:00:00",
"db": "VULMON",
"id": "CVE-2017-6779"
},
{
"date": "2018-06-06T00:00:00",
"db": "BID",
"id": "104662"
},
{
"date": "2018-08-09T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-013764"
},
{
"date": "2019-10-17T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201806-404"
},
{
"date": "2025-07-31T15:03:24.870000",
"db": "NVD",
"id": "CVE-2017-6779"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201806-404"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural Cisco Product depletion vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-013764"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "resource management error",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201806-404"
}
],
"trust": 0.6
}
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.