Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-28r8-9g34-2x25

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A vulnerability in the web UI of Cisco Umbrella could allow an unauthenticated, remote attacker to negatively affect the performance of this service. The vulnerability exists due to insufficient rate limiting controls in the web UI. An attacker could exploit this vulnerability by sending crafted HTTPS packets at a high and sustained rate. A successful exploit could allow the attacker to negatively affect the performance of the web UI. Cisco has addressed this vulnerability.

A vulnerability in the web UI of Cisco Umbrella could allow an unauthenticated, remote attacker to negatively affect the performance of this service. The vulnerability exists due to insufficient rate limiting controls in the web UI. An attacker could exploit this vulnerability by sending crafted HTTPS packets at a high and sustained rate. A successful exploit could allow the attacker to negatively affect the performance of the web UI. Cisco has addressed this vulnerability.

EPSS

Процентиль: 57%
0.00351
Низкий

Дефекты

CWE-770

Связанные уязвимости

CVSS3: 5.3
nvd
больше 4 лет назад

A vulnerability in the web UI of Cisco Umbrella could allow an unauthenticated, remote attacker to negatively affect the performance of this service. The vulnerability exists due to insufficient rate limiting controls in the web UI. An attacker could exploit this vulnerability by sending crafted HTTPS packets at a high and sustained rate. A successful exploit could allow the attacker to negatively affect the performance of the web UI. Cisco has addressed this vulnerability.

CVSS3: 5.3
fstec
больше 4 лет назад

Уязвимость веб-интерфейса облачного сервиса безопасности Cisco Umbrella, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 57%
0.00351
Низкий

Дефекты

CWE-770