Denial of Service Vulnerability (CVE-2015-0744) for Multiple Cisco products)

Denial of Service Vulnerability (CVE-2015-0744) for Multiple Cisco products)
Denial of Service Vulnerability (CVE-2015-0744) for Multiple Cisco products)

Release date:
Updated on:

Affected Systems:

Cisco DTA Control System (DTACS) 4.0.0.9
Cisco Headend System Release

Description:

Bugtraq id: 74916
CVE (CAN) ID: CVE-2015-0744

Cisco DTACS is a digital transmission adapter control system.

The TCP module of Cisco DTACS 4.0.0.9 and Cisco Headend System Release has a security vulnerability. Due to the lack of rate restrictions in TCP listener applications, unauthenticated remote attackers can consume system resources and cause denial of service by sending a large amount of tcp syn or Dos traffic to the target device.

<* Source: Cisco
*>

Suggestion:

Vendor patch:

Cisco
-----
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://tools.cisco.com/security/center/viewAlert.x? AlertId = 38943

This article permanently updates the link address: