Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2017-6780

23
FAUCET Score

CVE-2017-6780 is a memory exhaustion vulnerability in the TCP throttling process of Cisco IoT Field Network Director (IoT-FND) and Connected Grid Network Management System (CG-NMS) versions prior to IoT-FND Release 4.0. An unauthenticated, remote attacker can exploit this by sending a high rate of TCP packets to specific open ports, causing the system to consume excessive memory. This leads to a temporary denial of service (DoS) as the device is forced to restart. The vulnerability has a CVSS v3.0 score of 7.5 (High), indicating a network-based attack with low complexity, requiring no privileges or user interaction, and resulting in high availability impact. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage. The EPSS score is low, suggesting a minimal likelihood of exploitation in the wild.

Impacted Technologies

VendorProductVersion(s)CPE
<= 3.0\(0.54\)CPE matchmatch criteria
cpe:2.3:a:cisco:connected_grid_network_management_system:*:*:*:*:*:*:*:*
<= 3.2.0-182CPE matchmatch criteria
cpe:2.3:a:cisco:iot_field_network_director:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

7.5HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
3.6
CvssVersion
3.0

Exploit Intelligence

EPSS Score
1.74%
Probability of exploitation in next 30 days
EPSS Percentile
75.3%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
This CVE's current EPSS score of 0.0174 is in the 58th percentile among its peer group of 51,455 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (1)

ciscovendor investigatingvia nvd_reference
View patch

References

tools.cisco.com / security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-fnd
Vendor Advisory
securityfocus.com / bid/100641
Third Party AdvisoryVDB Entry