Local File Management Vulnerability in Cisco Collaboration Products

CVE-2017-6779

What is CVE-2017-6779?

Certain Cisco collaboration products have a vulnerability in local file management that allows an unauthenticated remote attacker to exploit a system log file, potentially leading to disk space exhaustion. This occurs because the log file lacks a maximum size restriction, allowing it to grow excessively and consume available disk space. Attackers can exploit this by sending specially crafted requests, which can cause the impacted system to enter a denial of service condition, resulting in instability and abnormal application operations.

References