A vulnerability in the TCP throttling process for the GUI of the Cisco Identity Services Engine (ISE) 2.1(0.474) could allow an unauthentic…

Published 9 y ago 2017-05-22 · modified 4 mo ago 2026-06-17 · JSON

CVSS

7.5

v3.0 · NVD

CISA KEV

not known exploited

EPSS

2.1%

percentile 82%

Public exploits

none known

A vulnerability in the TCP throttling process for the GUI of the Cisco Identity Services Engine (ISE) 2.1(0.474) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device where the ISE GUI may fail to respond to new or established connection requests. The vulnerability is due to insufficient TCP rate limiting protection on the GUI. An attacker could exploit this vulnerability by sending the affected device a high rate of TCP connections to the GUI. An exploit could allow the attacker to cause the GUI to stop responding while the high rate of connections is in progress. Cisco Bug IDs: CSCvc81803.

Exploit prediction (EPSS)

2.14% probability of exploitation in the next 30 days, higher than 82% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.0	7.5	`CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
NVD	2.0	5.0	`AV:N/AC:L/Au:N/C:N/I:N/A:P`

Affected products

n/a Cisco Identity Services Engine

Classification

Weakness

CWE-399 Resource Management Errors
CWE-770 Allocation of Resources Without Limits or Throttling

References

securityfocus.com /bid/98536 · vdb-entry, x_refsource_BID, x_transferred
securitytracker.com /id/1038516 · vdb-entry, x_refsource_SECTRACK, x_transferred
tools.cisco.com /security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-ise · x_refsource_CONFIRM, x_transferred

Sources

CVE List: CVE-2017-6653
NVD: CVE-2017-6653

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.