Cyber Risks · Cisco Talos

Vulnerability Spotlight: TALOS-2018-0535 - Ocularis Recorder VMS_VA Denial of Service Vulnerability

Summary: Cisco Talos reported a denial-of-service vulnerability, TALOS-2018-0535, in the Ocularis Recorder VMS_VA server process, which listens for TCP connections on a port in the range of 60801-65535. The binary kills itself when received data begins with "dispose," and no authentication is required for the command to go through.

What's compelling: Any attacker with network access to the server application can send a single unauthenticated string and take the process down, and Ocularis has released patches for versions 5.3, 5.4 and 5.5.

Read the original at Cisco Talos ↗

Topics
Endpoint & Network Security
Related