CVE-2011-4650 Denial of service in n/a
Excessive logging during TCP floods on Java ports causes high CPU utilization and potential service disruption in Cisco DCNM.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2011-4650?
CVE-2011-4650 is a high-severity denial of service vulnerability in Cisco Data Center Network Manager, published on 7 Aug 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Cisco Data Center Network Manager is affected by Excessive Logging During a TCP Flood on Java Ports. If the size of server.log becomes very big because of too much logging by the DCNM server, then the CPU utilization increases. Known Affected Releases: 5.2(1). Known Fixed Releases: 6.0(0)SL1(0.14) 5.2(2.73)S0. Product identification: CSCtt15295.
Weakness: CWE-399
Which versions are affected by CVE-2011-4650?
It affects 1 product.
Products include Cisco Data Center Network Manager.
How do I fix CVE-2011-4650?
No fix has been published for CVE-2011-4650 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2011-4650 being exploited?
There is no known exploitation of CVE-2011-4650 in the wild and no public exploit code.
Other vulnerabilities in Cisco Data Center Network Manager
- CVE-2020-3382 Cisco Data Center Network Manager Authentication Bypass Vulnerability
- CVE-2019-15975 Cisco Data Center Network Manager Authentication Bypass Vulnerabilities
- CVE-2019-15976 Cisco Data Center Network Manager Authentication Bypass Vulnerabilities
- CVE-2019-15977 Cisco Data Center Network Manager Authentication Bypass Vulnerabilities
- CVE-2019-1619 Cisco Data Center Network Manager Authentication Bypass Vulnerability
Sources
Also known as GHSA-j66p-7xqc-vr5m.