CVE-2013-3385

2022-10-0316:14:46

cisco

www.cve.org

ironport asyncos

cisco web security appliance

email security appliance

content security management appliance

denial of service

http

https

6.6 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.3%

JSON

The management GUI in the web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-602; Email Security Appliance devices before 7.1.5-106 and 7.3, 7.5, and 7.6 before 7.6.3-019; and Content Security Management Appliance devices before 7.9.1-102 and 8.0 before 8.0.0-404 allows remote attackers to cause a denial of service (system hang) via a series of (1) HTTP or (2) HTTPS requests to a management interface, aka Bug IDs CSCzv58669, CSCzv63329, and CSCzv78669.