Lucene search

[email protected]CVE-2015-6421

HistoryJan 27, 2016 - 10:59 p.m.

CVE-2015-6421

2016-01-2722:59:00

CWE-399

[email protected]

web.nvd.nist.gov

cve-2015-6421

cifs-ao

cifs optimization

cisco

waas

vwaas

denial of service

remote attackers

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.002 Low

EPSS

Percentile

55.3%

JSON

cifs-ao in the CIFS optimization functionality on Cisco Wide Area Application Service (WAAS) and Virtual WAAS (vWAAS) devices 5.x before 5.3.5d and 5.4 and 5.5 before 5.5.3 allows remote attackers to cause a denial of service (resource consumption and device reload) via crafted network traffic, aka Bug ID CSCus85330.

CPENameOperatorVersion
cisco:wide_area_application_servicescisco wide area application serviceseq5.1.1b
cisco:wide_area_application_servicescisco wide area application serviceseq5.1.1c
cisco:wide_area_application_servicescisco wide area application serviceseq5.3.5a
cisco:wide_area_application_servicescisco wide area application serviceseq5.3.5
cisco:wide_area_application_servicescisco wide area application serviceseq5.1.1
cisco:wide_area_application_servicescisco wide area application serviceseq5.3.5b
cisco:wide_area_application_servicescisco wide area application serviceseq5.3.5c
cisco:wide_area_application_servicescisco wide area application serviceseq5.1.1a
cisco:wide_area_application_servicescisco wide area application serviceseq5.2.1
cisco:wide_area_application_servicescisco wide area application serviceseq5.1.1d

CPE	Name	Operator	Version
cisco:wide_area_application_services	cisco wide area application services	eq	5.1.1b
cisco:wide_area_application_services	cisco wide area application services	eq	5.1.1c
cisco:wide_area_application_services	cisco wide area application services	eq	5.3.5a
cisco:wide_area_application_services	cisco wide area application services	eq	5.3.5
cisco:wide_area_application_services	cisco wide area application services	eq	5.1.1
cisco:wide_area_application_services	cisco wide area application services	eq	5.3.5b
cisco:wide_area_application_services	cisco wide area application services	eq	5.3.5c
cisco:wide_area_application_services	cisco wide area application services	eq	5.1.1a
cisco:wide_area_application_services	cisco wide area application services	eq	5.2.1
cisco:wide_area_application_services	cisco wide area application services	eq	5.1.1d

Rows per page:

1-10 of 131

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-waascifs

www.securitytracker.com/id/1034831

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.002 Low

EPSS

Percentile

55.3%

JSON

Related for CVE-2015-6421

prion1 cvelist1 cisco1