Lucene search

[email protected]CVE-2015-6321

HistoryNov 06, 2015 - 3:59 a.m.

CVE-2015-6321

2015-11-0603:59:00

CWE-399

[email protected]

web.nvd.nist.gov

cve-2015-6321

cisco

asyncos

email security appliance

esa

content security management appliance

sma

web security appliance

wsa

denial of service

memory consumption

tcp packets

vulnerability

6.7 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.006 Low

EPSS

Percentile

77.6%

JSON

Cisco AsyncOS before 8.5.7-042, 9.x before 9.1.0-032, 9.1.x before 9.1.1-023, and 9.5.x and 9.6.x before 9.6.0-042 on Email Security Appliance (ESA) devices; before 9.1.0-032, 9.1.1 before 9.1.1-005, and 9.5.x before 9.5.0-025 on Content Security Management Appliance (SMA) devices; and before 7.7.0-725 and 8.x before 8.0.8-113 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (memory consumption) via a flood of TCP packets, aka Bug IDs CSCus79774, CSCus79777, and CSCzv95795.

CPENameOperatorVersion
cisco:web_security_appliancecisco web security applianceeq7.5.2-000
cisco:web_security_appliancecisco web security applianceeq8.5.0.000
cisco:web_security_appliancecisco web security applianceeq7.5.0-825
cisco:web_security_appliancecisco web security applianceeq8.0.0-000
cisco:web_security_appliancecisco web security applianceeq7.5.0-000
cisco:web_security_appliancecisco web security applianceeq7.5.1-000
cisco:web_security_appliancecisco web security applianceeq6.0.0-000
cisco:web_security_appliancecisco web security applianceeq5.6.0-623
cisco:web_security_appliancecisco web security applianceeq7.7.0-000
cisco:web_security_appliancecisco web security applianceeq7.7.1-000

CPE	Name	Operator	Version
cisco:web_security_appliance	cisco web security appliance	eq	7.5.2-000
cisco:web_security_appliance	cisco web security appliance	eq	8.5.0.000
cisco:web_security_appliance	cisco web security appliance	eq	7.5.0-825
cisco:web_security_appliance	cisco web security appliance	eq	8.0.0-000
cisco:web_security_appliance	cisco web security appliance	eq	7.5.0-000
cisco:web_security_appliance	cisco web security appliance	eq	7.5.1-000
cisco:web_security_appliance	cisco web security appliance	eq	6.0.0-000
cisco:web_security_appliance	cisco web security appliance	eq	5.6.0-623
cisco:web_security_appliance	cisco web security appliance	eq	7.7.0-000
cisco:web_security_appliance	cisco web security appliance	eq	7.7.1-000

Rows per page:

1-10 of 401

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151104-aos

www.securitytracker.com/id/1034060

www.securitytracker.com/id/1034061

6.7 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.006 Low

EPSS

Percentile

77.6%

JSON

Related for CVE-2015-6321

prion1 nessus3 cisco1 openvas3