Buffer overflow in Cisco Expressway
CVE-2017-3790
A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) software could allow an unauthenticated, remote attacker to cause a reload of the affected system, resulting i…
EPSS: 0.003 (53.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.6 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H.
Affected products
- Cisco Expressway — versions x8.1.0, x8.1.1, x8.1.2
- Cisco Telepresence_video_communication_server — versions x5.2_base, x6.0_base, x6.1_base
- N/a Cisco Expressway Series Software And Telepresence Vcs All Versions Prior To Version X8.8.2 Are Vulnerable — versions Cisco Expressway Series Software and Cisco TelePresence VCS Software All versions prior to version X8.8.2 are vulnerable
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
Frequently asked questions
- What is CVE-2017-3790?
- CVE-2017-3790 is a high-severity vulnerability in Cisco Expressway, classified under CWE-399. CVSS score: 8.6/10. Published 2017-02-01.
- How severe is CVE-2017-3790?
- High severity. CVSS v3 base score is 8.6 out of 10.