Read the docs
TI-2017-04407 Aliases CVE-2017-6648GHSA-6236-r83r-x6q2

Resource management flaw in Cisco TelePresence Endpoint Denial of Service Vulnerability

Priority LOW 39CWE-399Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-399 and the CVSS impact.

Summary

A vulnerability in the Session Initiation Protocol (SIP) of the Cisco TelePresence Codec (TC) and Collaboration Endpoint (CE) Software could allow an unauthenticated, remote attacker to cause a TelePresence endpoint to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to a lack of flow-control mechanisms within the software. An attacker could exploit this vulnerability by sending a flood of SIP INVITE packets to the affected device. An exploit could allow the attacker to impact the availability of services and data of the device, including a complete DoS condition. This vulnerability affects the following Cisco TC and CE platforms when running software versions prior to TC 7.3.8 and CE 8.3.0. Cisco Bug IDs: CSCux94002.

Why it matters now

EPSS 0.03564 89th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Cisco TelePresence Endpoint Denial of Service VulnerabilityCisco TelePresence Endpoint Denial of Service Vulnerability—No fix listedCNA
  • Cisco TelePresence Endpoint Denial of Service Vulnerability Vendor— Affected Cisco TelePresence Endpoint Denial of Service Vulnerability Fixed in — No fix listed CNA

CPE configurations NVD · 67

CPEVersionsRoleVendor
cpe:2.3:a:cisco:telepresence_ce_software:8.2.2:*:*:*:*:*:*:*8.2.2VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:3.1.5:*:*:*:*:*:*:*3.1.5VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:3.1_base:*:*:*:*:*:*:*3.1_baseVulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:4.1.0:*:*:*:*:*:*:*4.1.0VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:4.1.1:*:*:*:*:*:*:*4.1.1VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:4.1.2:*:*:*:*:*:*:*4.1.2VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:4.1_base:*:*:*:*:*:*:*4.1_baseVulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:4.2.0:*:*:*:*:*:*:*4.2.0VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:4.2.1:*:*:*:*:*:*:*4.2.1VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:4.2.2:*:*:*:*:*:*:*4.2.2VulnerableCisco
  • cpe:2.3:a:cisco:telepresence_ce_software:8.2.2:*:*:*:*:*:*:* Versions 8.2.2 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:3.1.5:*:*:*:*:*:*:* Versions 3.1.5 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:3.1_base:*:*:*:*:*:*:* Versions 3.1_base Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:4.1.0:*:*:*:*:*:*:* Versions 4.1.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:4.1.1:*:*:*:*:*:*:* Versions 4.1.1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:4.1.2:*:*:*:*:*:*:* Versions 4.1.2 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:4.1_base:*:*:*:*:*:*:* Versions 4.1_base Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:4.2.0:*:*:*:*:*:*:* Versions 4.2.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:4.2.1:*:*:*:*:*:*:* Versions 4.2.1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:4.2.2:*:*:*:*:*:*:* Versions 4.2.2 Vulnerable ·Cisco
Show 57 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:cisco:telepresence_tc_software:4.2.3:*:*:*:*:*:*:*4.2.3VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:4.2.4:*:*:*:*:*:*:*4.2.4VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:4.2_base:*:*:*:*:*:*:*4.2_baseVulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:5.0.2:*:*:*:*:*:*:*5.0.2VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:5.0.2-cucm:*:*:*:*:*:*:*5.0.2-cucmVulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:5.0_base:*:*:*:*:*:*:*5.0_baseVulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:5.1.3:*:*:*:*:*:*:*5.1.3VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:5.1.3-cucm:*:*:*:*:*:*:*5.1.3-cucmVulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:5.1.4:*:*:*:*:*:*:*5.1.4VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:5.1.4-cucm:*:*:*:*:*:*:*5.1.4-cucmVulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:5.1.5:*:*:*:*:*:*:*5.1.5VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:5.1.5-cucm:*:*:*:*:*:*:*5.1.5-cucmVulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:5.1.6:*:*:*:*:*:*:*5.1.6VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:5.1.6-cucm:*:*:*:*:*:*:*5.1.6-cucmVulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:5.1.7:*:*:*:*:*:*:*5.1.7VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:5.1.7-cucm:*:*:*:*:*:*:*5.1.7-cucmVulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:5.1.11:*:*:*:*:*:*:*5.1.11VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:5.1.13:*:*:*:*:*:*:*5.1.13VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:5.1_base:*:*:*:*:*:*:*5.1_baseVulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:6.0.0:*:*:*:*:*:*:*6.0.0VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:6.0.0-cucm:*:*:*:*:*:*:*6.0.0-cucmVulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:6.0.1:*:*:*:*:*:*:*6.0.1VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:6.0.1-cucm:*:*:*:*:*:*:*6.0.1-cucmVulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:6.0.2:*:*:*:*:*:*:*6.0.2VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:6.0.3:*:*:*:*:*:*:*6.0.3VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:6.0.4:*:*:*:*:*:*:*6.0.4VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:6.0_base:*:*:*:*:*:*:*6.0_baseVulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:6.1.0:*:*:*:*:*:*:*6.1.0VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:6.1.0-cucm:*:*:*:*:*:*:*6.1.0-cucmVulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:6.1.1:*:*:*:*:*:*:*6.1.1VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:6.1.1-cucm:*:*:*:*:*:*:*6.1.1-cucmVulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:6.1.2:*:*:*:*:*:*:*6.1.2VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:6.1.2-cucm:*:*:*:*:*:*:*6.1.2-cucmVulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:6.1.3:*:*:*:*:*:*:*6.1.3VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:6.1.4:*:*:*:*:*:*:*6.1.4VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:6.1_base:*:*:*:*:*:*:*6.1_baseVulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:6.3.0:*:*:*:*:*:*:*6.3.0VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:6.3.1:*:*:*:*:*:*:*6.3.1VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:6.3.2:*:*:*:*:*:*:*6.3.2VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:6.3.3:*:*:*:*:*:*:*6.3.3VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:6.3.4:*:*:*:*:*:*:*6.3.4VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:6.3.5:*:*:*:*:*:*:*6.3.5VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:7.1.0:*:*:*:*:*:*:*7.1.0VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:7.1.1:*:*:*:*:*:*:*7.1.1VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:7.1.2:*:*:*:*:*:*:*7.1.2VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:7.1.3:*:*:*:*:*:*:*7.1.3VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:7.1.4:*:*:*:*:*:*:*7.1.4VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:7.2.0:*:*:*:*:*:*:*7.2.0VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:7.2.1:*:*:*:*:*:*:*7.2.1VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:7.3.0:*:*:*:*:*:*:*7.3.0VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:7.3.1:*:*:*:*:*:*:*7.3.1VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:7.3.2:*:*:*:*:*:*:*7.3.2VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:7.3.3:*:*:*:*:*:*:*7.3.3VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:7.3.6:*:*:*:*:*:*:*7.3.6VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:7.3.7:*:*:*:*:*:*:*7.3.7VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:8.2.0:*:*:*:*:*:*:*8.2.0VulnerableCisco
cpe:2.3:a:cisco:telepresence_tc_software:8.2.1:*:*:*:*:*:*:*8.2.1VulnerableCisco
  • cpe:2.3:a:cisco:telepresence_tc_software:4.2.3:*:*:*:*:*:*:* Versions 4.2.3 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:4.2.4:*:*:*:*:*:*:* Versions 4.2.4 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:4.2_base:*:*:*:*:*:*:* Versions 4.2_base Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:5.0.2:*:*:*:*:*:*:* Versions 5.0.2 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:5.0.2-cucm:*:*:*:*:*:*:* Versions 5.0.2-cucm Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:5.0_base:*:*:*:*:*:*:* Versions 5.0_base Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:5.1.3:*:*:*:*:*:*:* Versions 5.1.3 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:5.1.3-cucm:*:*:*:*:*:*:* Versions 5.1.3-cucm Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:5.1.4:*:*:*:*:*:*:* Versions 5.1.4 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:5.1.4-cucm:*:*:*:*:*:*:* Versions 5.1.4-cucm Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:5.1.5:*:*:*:*:*:*:* Versions 5.1.5 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:5.1.5-cucm:*:*:*:*:*:*:* Versions 5.1.5-cucm Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:5.1.6:*:*:*:*:*:*:* Versions 5.1.6 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:5.1.6-cucm:*:*:*:*:*:*:* Versions 5.1.6-cucm Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:5.1.7:*:*:*:*:*:*:* Versions 5.1.7 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:5.1.7-cucm:*:*:*:*:*:*:* Versions 5.1.7-cucm Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:5.1.11:*:*:*:*:*:*:* Versions 5.1.11 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:5.1.13:*:*:*:*:*:*:* Versions 5.1.13 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:5.1_base:*:*:*:*:*:*:* Versions 5.1_base Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:6.0.0:*:*:*:*:*:*:* Versions 6.0.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:6.0.0-cucm:*:*:*:*:*:*:* Versions 6.0.0-cucm Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:6.0.1:*:*:*:*:*:*:* Versions 6.0.1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:6.0.1-cucm:*:*:*:*:*:*:* Versions 6.0.1-cucm Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:6.0.2:*:*:*:*:*:*:* Versions 6.0.2 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:6.0.3:*:*:*:*:*:*:* Versions 6.0.3 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:6.0.4:*:*:*:*:*:*:* Versions 6.0.4 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:6.0_base:*:*:*:*:*:*:* Versions 6.0_base Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:6.1.0:*:*:*:*:*:*:* Versions 6.1.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:6.1.0-cucm:*:*:*:*:*:*:* Versions 6.1.0-cucm Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:6.1.1:*:*:*:*:*:*:* Versions 6.1.1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:6.1.1-cucm:*:*:*:*:*:*:* Versions 6.1.1-cucm Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:6.1.2:*:*:*:*:*:*:* Versions 6.1.2 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:6.1.2-cucm:*:*:*:*:*:*:* Versions 6.1.2-cucm Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:6.1.3:*:*:*:*:*:*:* Versions 6.1.3 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:6.1.4:*:*:*:*:*:*:* Versions 6.1.4 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:6.1_base:*:*:*:*:*:*:* Versions 6.1_base Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:6.3.0:*:*:*:*:*:*:* Versions 6.3.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:6.3.1:*:*:*:*:*:*:* Versions 6.3.1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:6.3.2:*:*:*:*:*:*:* Versions 6.3.2 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:6.3.3:*:*:*:*:*:*:* Versions 6.3.3 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:6.3.4:*:*:*:*:*:*:* Versions 6.3.4 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:6.3.5:*:*:*:*:*:*:* Versions 6.3.5 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:7.1.0:*:*:*:*:*:*:* Versions 7.1.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:7.1.1:*:*:*:*:*:*:* Versions 7.1.1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:7.1.2:*:*:*:*:*:*:* Versions 7.1.2 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:7.1.3:*:*:*:*:*:*:* Versions 7.1.3 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:7.1.4:*:*:*:*:*:*:* Versions 7.1.4 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:7.2.0:*:*:*:*:*:*:* Versions 7.2.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:7.2.1:*:*:*:*:*:*:* Versions 7.2.1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:7.3.0:*:*:*:*:*:*:* Versions 7.3.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:7.3.1:*:*:*:*:*:*:* Versions 7.3.1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:7.3.2:*:*:*:*:*:*:* Versions 7.3.2 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:7.3.3:*:*:*:*:*:*:* Versions 7.3.3 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:7.3.6:*:*:*:*:*:*:* Versions 7.3.6 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:7.3.7:*:*:*:*:*:*:* Versions 7.3.7 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:8.2.0:*:*:*:*:*:*:* Versions 8.2.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:telepresence_tc_software:8.2.1:*:*:*:*:*:*:* Versions 8.2.1 Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-6648
  2. 2026-10-03 Alias added: GHSA-6236-r83r-x6q2

References

Advisory 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences