Lucene search

[email protected]CVE-2016-6437

HistoryOct 27, 2016 - 9:59 p.m.

CVE-2016-6437

2016-10-2721:59:00

CWE-399

[email protected]

web.nvd.nist.gov

cisco

waas

ssl

vulnerability

cve-2016-6437

dos

nvd

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

5.7 Medium

AI Score

Confidence

High

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.006 Low

EPSS

Percentile

77.7%

JSON

A vulnerability in the SSL session cache management of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high consumption of disk space. The user would see a performance degradation. More Information: CSCva03095. Known Affected Releases: 5.3(5), 6.1(1), 6.2(1). Known Fixed Releases: 5.3(5g)1, 6.2(2.32).

CPENameOperatorVersion
cisco:wide_area_application_servicescisco wide area application serviceseq6.1.0
cisco:wide_area_application_servicescisco wide area application serviceseq6.2.1a
cisco:wide_area_application_servicescisco wide area application serviceseq6.2.1
cisco:wide_area_application_servicescisco wide area application serviceseq5.3.5a
cisco:wide_area_application_servicescisco wide area application serviceseq5.3.5
cisco:wide_area_application_servicescisco wide area application serviceseq5.3.5b
cisco:wide_area_application_servicescisco wide area application serviceseq5.3.5c
cisco:wide_area_application_servicescisco wide area application serviceseq5.3.5d
cisco:wide_area_application_servicescisco wide area application serviceseq5.3.1
cisco:wide_area_application_servicescisco wide area application serviceseq5.3.5f

CPE	Name	Operator	Version
cisco:wide_area_application_services	cisco wide area application services	eq	6.1.0
cisco:wide_area_application_services	cisco wide area application services	eq	6.2.1a
cisco:wide_area_application_services	cisco wide area application services	eq	6.2.1
cisco:wide_area_application_services	cisco wide area application services	eq	5.3.5a
cisco:wide_area_application_services	cisco wide area application services	eq	5.3.5
cisco:wide_area_application_services	cisco wide area application services	eq	5.3.5b
cisco:wide_area_application_services	cisco wide area application services	eq	5.3.5c
cisco:wide_area_application_services	cisco wide area application services	eq	5.3.5d
cisco:wide_area_application_services	cisco wide area application services	eq	5.3.1
cisco:wide_area_application_services	cisco wide area application services	eq	5.3.5f

Rows per page:

1-10 of 131

References

www.securityfocus.com/bid/93524

www.securitytracker.com/id/1037002

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161012-waas

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

5.7 Medium

AI Score

Confidence

High

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.006 Low

EPSS

Percentile

77.7%

JSON

Related for CVE-2016-6437

prion1 cisco1 cvelist1 threatpost1