Vulnerability in Cisco Yesmax Hd
CVE-2017-6631
A vulnerability in the HTTP remote procedure call (RPC) service of set-top box (STB) receivers manufactured by Cisco for Yes could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability exists because the firmware of an affected device fails to handle certain XML values that are passed to the HTTP RPC service listening on the local subnet of the device. An attacker could exploit this vulnerability by submitting a malformed request to an affected device. A successful attack could cause the affected device to restart, resulting in a DoS condition. Yes has updated the affected devices with firmware that addresses this vulnerability. Customers are not required to take action. Vulnerable Products: This vulnerability affects YesMaxTotal, YesMax HD, and YesQuattro STB devices. Cisco Bug IDs: CSCvd08812.
EPSS: 0.017 (75.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Cisco Yesmax_hd
- Cisco Yesmax_hd_firmware
- Cisco Yesmaxtotal
- Cisco Yesmaxtotal_firmware
- Cisco Yesquattro
- Cisco Yesquattro_firmware
- N/a Cisco Yes Set-top Box — versions Cisco Yes Set-Top Box
Weakness classification (CWE)
References
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2017-6631?
- CVE-2017-6631 is a high-severity vulnerability in Cisco Yesmax Hd, classified under CWE-399. CVSS score: 7.5/10. Published 2017-09-07.
- How severe is CVE-2017-6631?
- High severity. CVSS v3 base score is 7.5 out of 10.