CVE-2007-3923

Cisco Wide Area Application Services 4.0.7 and 4.0.9 - Denial of Service via TCP SYN Flood to CIFS Ports

Title source: llm
STIX 2.1

Description

The Common Internet File System (CIFS) optimization in Cisco Wide Area Application Services (WAAS) 4.0.7 and 4.0.9, as used by Cisco WAE appliance and the NM-WAE-502 network module, when Edge Services are configured, allows remote attackers to cause a denial of service (loss of service) via a flood of TCP SYN packets to port (1) 139 or (2) 445.

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/36120
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/2572
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/24956
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/35477
Patch vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1018416
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/26122

Scores

EPSS 0.0198
EPSS Percentile 78.4%

Details

Status published
Products (2)
cisco/wide_area_application_services 4.0.7
cisco/wide_area_application_services 4.0.9
Published Jul 21, 2007
Tracked Since Feb 18, 2026