High severity · published Aug 7, 2017
CVE-2011-4650
Cisco Data Center Network Manager is affected by Excessive Logging During a TCP Flood on Java Ports
7.5
CVSS
1.3%
EPSS
No
On KEV
Description
Cisco Data Center Network Manager is affected by Excessive Logging During a TCP Flood on Java Ports. If the size of server.log becomes very big because of too much logging by the DCNM server, then the CPU utilization increases. Known Affected Releases: 5.2(1). Known Fixed Releases: 6.0(0)SL1(0.14) 5.2(2.73)S0. Product identification: CSCtt15295.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DC
Data Center Network Manager · Cisco
5.2(1) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-4650
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-4650
Third Party Advisory
https://icisystem.blogspot.com/2015/09/cisco-notification-alert-prime-dcnm-01.html
Vendor Advisory
https://quickview.cloudapps.cisco.com/quickview/bug/CSCtt15295
More from Data Center Network Manager
9.8
CVE-2020-3382
A vulnerability in the REST API of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions…
9.8
CVE-2020-3376
A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute…
9.8
CVE-2019-15976
Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and…
9.8
CVE-2019-15975
Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and…
9.8
CVE-2019-1620
A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to upload arbitrary files on an…