CVE-2017-12287 (CNNVD-201710-881)
中文标题:
Cisco Expressway Series Software和Cisco TelePresence Video Communication Server Software cluster database management 安全漏洞
英文标题:
A vulnerability in the cluster database (CDB) management component of Cisco Expressway Series Softwa...
漏洞描述
中文描述:
Cisco Expressway Series Software和Cisco TelePresence Video Communication Server（VCS）Software都是美国思科（Cisco）公司的网真视频通信服务器，它能够与统一通信和语音通信环境集成，从而为使用各种通信工具的最终用户提供支持。cluster database（CDB）management是其中的一个集群数据库管理组件。 Cisco Expressway Series Software和Cisco TelePresence VCS Software中的CDB management组件存在拒绝服务漏洞，该漏洞源于程序没有充分的对URL请求执行输入验证。远程攻击者可通过向受影响软件的REST API发送特制的URL利用该漏洞造成暂时性的拒绝服务（系统重启）。
英文描述:
A vulnerability in the cluster database (CDB) management component of Cisco Expressway Series Software and Cisco TelePresence Video Communication Server (VCS) Software could allow an authenticated, remote attacker to cause the CDB process on an affected system to restart unexpectedly, resulting in a temporary denial of service (DoS) condition. The vulnerability is due to incomplete input validation of URL requests by the REST API of the affected software. An attacker could exploit this vulnerability by sending a crafted URL to the REST API of the affected software on an affected system. A successful exploit could allow the attacker to cause the CDB process on the affected system to restart unexpectedly, resulting in a temporary DoS condition. Cisco Bug IDs: CSCve77571.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| cisco | expressway | * | - | - |
cpe:2.3:a:cisco:expressway:*:*:*:*:*:*:*:*
|
| cisco | telepresence_conductor | * | - | - |
cpe:2.3:a:cisco:telepresence_conductor:*:*:*:*:*:*:*:*
|
| cisco | telepresence_video_communication_server | * | - | - |
cpe:2.3:a:cisco:telepresence_video_communication_server:*:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2017-12287 |
2025-11-11 15:19:17 | 2025-11-11 07:34:33 |
| NVD | nvd_CVE-2017-12287 |
2025-11-11 14:55:32 | 2025-11-11 07:43:12 |
| CNNVD | cnnvd_CNNVD-201710-881 |
2025-11-11 15:09:54 | 2025-11-11 07:53:22 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 输入验证错误
- cnnvd_id: 未提取 -> CNNVD-201710-881
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- cvss_score: 未提取 -> 4.3
- cvss_vector: NOT_EXTRACTED -> CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
- cvss_version: NOT_EXTRACTED -> 3.0
- affected_products_count: 0 -> 3
- data_sources: ['cve'] -> ['cve', 'nvd']