Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vrjw-2w56-8m6q

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

A vulnerability in the syslog processing engine of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a race condition that may occur when syslog messages are processed. An attacker could exploit this vulnerability by sending a high rate of syslog messages to an affected device. A successful exploit could allow the attacker to cause the Application Server process to crash, resulting in a DoS condition.

A vulnerability in the syslog processing engine of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a race condition that may occur when syslog messages are processed. An attacker could exploit this vulnerability by sending a high rate of syslog messages to an affected device. A successful exploit could allow the attacker to cause the Application Server process to crash, resulting in a DoS condition.

EPSS

Процентиль: 59%
0.00377
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-362

Связанные уязвимости

CVSS3: 5.9
nvd
больше 5 лет назад

A vulnerability in the syslog processing engine of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a race condition that may occur when syslog messages are processed. An attacker could exploit this vulnerability by sending a high rate of syslog messages to an affected device. A successful exploit could allow the attacker to cause the Application Server process to crash, resulting in a DoS condition.

CVSS3: 5.9
fstec
больше 5 лет назад

Уязвимость механизма обработки системного журнала платформы управления политиками соединений Cisco Identity Services Engine (ISE), позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 59%
0.00377
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-362