CVE-2019-1876

CVE-2019-1876 affects Cisco WAAS (HTTPS proxy feature) and is due to insufficient authentication of proxy connection requests, allowing an unauthenticated, remote attacker to use the Central Manager as an HTTPS proxy by sending a malicious HTTPS CONNECT message. The attack could enable access to ...

CVE-2017-6628

CVE-2017-6628 affects Cisco WAAS WAAS SMART-SSL Accelerator (versions 6.2.1, 6.2.1a, 6.2.3a). The issue arises from improper handling of SSL/TLS alerts in a specific connection state, enabling an unauthenticated remote attacker to trigger a DoS where WAN optimization stops processing traffic brie...

CVE-2017-12256

The CVE-2017-12256 entry concerns Cisco WAAS Appliances’ Akamai Connect feature, where an unauthenticated remote attacker can trigger a DoS by causing devices to crash or hang. The root cause is file-handling inefficiencies that occur when clients access a corrupted file that cannot be decompress...

CVE-2017-12267

CVE-2017-12267 affects the Cisco Wide Area Application Services (WAAS) ICA Accelerator. A crafted ICA packet can trigger an unauthenticated remote attacker to restart the ICA optimization-related process, causing a partial DoS as WAAS drops ICA traffic during the restart. Root cause: improper abo...

CVE-2017-12250

The CVE-2017-12250 issue affects Cisco Wide Area Application Services (WAAS) HTTP web interface. It stems from insufficient input validation of HTTP request parameters in the HTTP Application Optimization (AO) process, allowing an unauthenticated, remote attacker to trigger a restart of that proc...

CVE-2018-0329

Cisco WAAS Software SNMP is vulnerable due to a hard-coded, read-only community string in the SNMP daemon config. This static credential, defined in an internal file and not visible in running/startup configs, allows unauthenticated remote readers to access data via SNMP v2c. Root cause: default/...

CVE-2014-2196

CVE-2014-2196 affects Cisco Wide Area Application Services (WAAS) versions 5.1.1 and earlier, with SharePoint prefetch optimization enabled. The issue enables remote code execution through a malformed response in the SharePoint acceleration path, due to a buffer/response handling flaw. Exploitati...

CVE-2018-0352

CVE-2018-0352 concerns Cisco WAAS Software’s Disk Check Tool (disk-check.sh). A local, authenticated attacker with super-user credentials (level 15) can replace a running script with a malicious one due to insufficient validation of script files, potentially gaining root privileges and full contr...

CVE-2015-0730

The CVE-2015-0730 issue affects Cisco Wide Area Application Services (WAAS) SMB module 6.0(1). It allows remote attackers to cause a DoS (module reload) by sending a crafted SMB Negotiate Protocol Request with an invalid field, due to improper input validation (Bug ID CSCuo75645). Public exploit ...

CVE-2016-6437

CVE-2016-6437 affects Cisco WAAS: a flaw in SSL session cache management can allow an unauthenticated remote attacker to cause a DoS by exhausting disk space, degrading performance. Affected releases include 5.3(5), 6.1(1), 6.2(1); fixed in 5.3(5g)1 and 6.2(2.32). Root cause: lack of file size li...

CVE-2013-3444

The CVE-2013-3444 entry corresponds to an authenticated command-injection vulnerability in multiple Cisco products when configured in central-management mode. Affected software includes Cisco WAAS (before 4.x and certain 5.x lines), Cisco ACNS, ECDS, CDS-IS, VDS-IS, VDS-SB, VDS-OE, and VDS-OS in ...

CVE-2017-6727

The CVE-2017-6727 issue affects Cisco Wide Area Application Services (WAAS) SMB service. A vulnerability in the SMB Create Request handling (incomplete input validation) can allow an unauthenticated, remote attacker to cause a DoS on affected devices by triggering a process restart that creates C...

CVE-2017-6730

CVE-2017-6730 affects Cisco WAAS Central Manager web GUI. A processing error in RBAC allows an unauthenticated, remote attacker to download completed reports from an affected system, causing information disclosure. Affected products configured with Central Manager include Cisco WAAS/ vWAAS applia...

CVE-2007-3923

The CVE-2007-3923 entry concerns Cisco WAAS CIFS optimization in WAAS versions 4.0.7 and 4.0.9, used by the WAE appliance and NM-WAE-502 network module. When Edge Services are configured, a remote attacker can cause a denial of service by flooding TCP SYN packets to ports 139 or 445. Affected com...

CVE-2015-6421

Cisco WAAS/vWAAS CIFS optimization (cifs-ao) is affected. A DoS is possible from crafted CIFS traffic due to insufficient flow handling, causing resource exhaustion and device reload. Affected versions are 5.x prior to 5.3.5d (and 5.4) and 5.5 prior to 5.5.3. Exploitation is described as remote a...

CVE-2017-6721

The CVE concerns Cisco Wide Area Application Services (WAAS). The vulnerability exists in the ingress processing of fragmented TCP packets, due to incomplete input validation of TCP fragments, which can cause the WAASNET process to restart and trigger a DoS. Affected release: 6.3(1). Fixed releas...

CVE-2012-1348

CVE-2012-1348 affects Cisco WAAS appliances running software 4.4, 5.0, and 5.1. The vulnerability stems from a design flaw that causes a password to be displayed as a one‑way hash within output text, enabling a remote attacker to perform brute‑force analysis on the hash to extract sensitive infor...

CVE-2014-3285

Cisco WAAS 5.3(.5a) and earlier with SharePoint acceleration enabled is vulnerable to a denial-of-service caused by improper parsing of SharePoint responses, triggering a reload of the application-optimization handler. Exploitation could be achieved by convincing a user to access a crafted ShareP...

CVE-2013-3443

The CVE-2013-3443 issue affects Cisco WAAS Software in Central Manager (CM) configurations. It allows remote attackers to execute arbitrary code by sending a crafted HTTP POST request to affected WAAS CM deployments. Affected versions include WAAS 4.x and 5.x prior to specific fixes: 5.0.3e, 5.1....

CVE-2021-1438

The CVE-2021-1438 vulnerability affects Cisco WAAS, arising from improper input validation and authorization of CLI commands. An authenticated, local attacker could read arbitrary files on WAAS devices due to these effects. Several sources confirm the issue and that Cisco released software update...