CVE-2017-3825

CVSS V2 Medium 5 CVSS V3 High 7.5
Description
A vulnerability in the ICMP ingress packet processing of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an unauthenticated, remote attacker to cause the TelePresence endpoint to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to incomplete input validation for the size of a received ICMP packet. An attacker could exploit this vulnerability by sending a crafted ICMP packet to the local IP address of the targeted endpoint. A successful exploit could allow the attacker to cause a DoS of the TelePresence endpoint, during which time calls could be dropped. This vulnerability would affect either IPv4 or IPv6 ICMP traffic. This vulnerability affects the following Cisco TelePresence products when running software release CE8.1.1, CE8.2.0, CE8.2.1, CE8.2.2, CE 8.3.0, or CE8.3.1: Spark Room OS, TelePresence DX Series, TelePresence MX Series, TelePresence SX Quick Set Series, TelePresence SX Series. Cisco Bug IDs: CSCvb95396.
Overview
  • CVE ID
  • CVE-2017-3825
  • Assigner
  • ykramarz@cisco.com
  • Vulnerability Status
  • Modified
  • Published Version
  • 2017-05-16T17:29:00
  • Last Modified Date
  • 2017-07-11T01:33:43
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:cisco:telepresence_ce:8.0.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:telepresence_ce:8.1.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:telepresence_ce:8.2.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:telepresence_tc:4.2.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:telepresence_tc:4.2.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:telepresence_tc:4.2.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:telepresence_tc:4.2.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:telepresence_tc:4.2.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:telepresence_tc:5.1.11:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:telepresence_tc:5.1.13:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:telepresence_tc:6.0.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:telepresence_tc:6.0.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:telepresence_tc:6.0.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:telepresence_tc:6.1.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:telepresence_tc:6.1.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:telepresence_tc:6.3.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:telepresence_tc:6.3.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:telepresence_tc:6.3.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:telepresence_tc:6.3.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:telepresence_tc:6.3.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:telepresence_tc:7.1.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:telepresence_tc:7.1.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:telepresence_tc:7.1.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:telepresence_tc:7.1.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:telepresence_tc:7.3.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:telepresence_tc:7.3.7:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:L/Au:N/C:N/I:N/A:P
  • Access Vector
  • NETWORK
  • Access Compatibility
  • LOW
  • Authentication
  • NONE
  • Confidentiality Impact
  • NONE
  • Integrity Impact
  • NONE
  • Availability Impact
  • PARTIAL
  • Base Score
  • 5
  • Severity
  • MEDIUM
  • Exploitability Score
  • 10
  • Impact Score
  • 2.9
CVSS Version 3
  • Version
  • 3.0
  • Vector String
  • CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  • Attack Vector
  • NETWORK
  • Attack Compatibility
  • LOW
  • Privileges Required
  • NONE
  • User Interaction
  • NONE
  • Scope
  • UNCHANGED
  • Confidentiality Impact
  • NONE
  • Availability Impact
  • HIGH
  • Base Score
  • 7.5
  • Base Severity
  • HIGH
  • Exploitability Score
  • 3.9
  • Impact Score
  • 3.6
History
Created Old Value New Value Data Type Notes
2022-05-10 09:26:48 Added to TrackCVE
2022-12-02 16:59:11 psirt@cisco.com ykramarz@cisco.com CVE Assigner updated
2022-12-02 16:59:11 2017-05-16T17:29Z 2017-05-16T17:29:00 CVE Published Date updated
2022-12-02 16:59:11 2017-07-11T01:33:43 CVE Modified Date updated
2022-12-02 16:59:11 Modified Vulnerability Status updated