Vulnslist

find the latest Cisco vulnerabilities

Cisco Prime Central for Hosted Collaboration Solution Denial of Service Vulnerability

Cisco-SA-20131105-CVE-2013-5562 · Medium · Published · Updated

A vulnerability in the ITM web server interface of the Cisco Prime Central for Hosted Collaboration Solution (HCS) could allow an unauthenticated, remote attacker to cause a denial of service on the targeted device. The vulnerability is due to the ITM port being unable to deal with a TCP flood. An attacker could exploit this vulnerability by sending a TCP flood to an ITM port. An exploit could allow an attacker to cause the ITM web interface to become unavailable for the duration of the attack. Cisco has confirmed the vulnerability in a security notice; however, software updates are not available. To exploit this vulnerability, an attacker must send a TCP flood to a targeted device, which may reside on trusted, internal networks that the attacker would likely need to access. This access requirement decreases the likelihood of a successful exploit.

Cisco advisory ·CSAF JSON

Workarounds

Administrators are advised to contact the vendor regarding future updates and releases.

Administrators are advised to allow only trusted users to have network access.

Administrators may consider using IP-based access control lists (ACLs) to allow only trusted systems to access the affected systems.

Administrators are advised to monitor affected systems.

CVEsCVE-2013-5562
Cisco Bug IDsCSCuh36313
CVSS ScoreBase 5.0
Base 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P/E:H/RL:U/RC:C
Product Names From Source
Cisco Prime Central for Hosted Collaboration Solution

CSAF Product Statuses

Product Status Source CVE Rows
Cisco Prime Central for Hosted Collaboration Solution known_affected cisco_csaf CVE-2013-5562 1

Related Products

Product CVE Evidence
Cisco Prime Central CVE-2013-5562 Cisco OpenVuln
Cisco Prime Central for Hosted Collaboration Solution CVE-2013-5562 Cisco OpenVuln