Denial of Service Vulnerability in Cisco SocialMiner TCP Stack

CVE-2018-0290

What is CVE-2018-0290?

A vulnerability exists in the TCP stack of Cisco SocialMiner that allows an unauthenticated remote attacker to trigger a denial of service (DoS) condition. This issue is caused by improper handling of new TCP connections to the application, which can be exploited by sending a malicious TCP packet. Successful exploitation results in the interruption of specific phone services, necessitating a manual restart of the service to restore full functionality. The vulnerability highlights the critical need for robust security measures in network applications.

References