CVE-2013-5537
Cisco Web/Email/Content Security Appliances DoS via TCP Flood
Title source: llmDescription
The web framework on Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA) devices does not properly manage the state of HTTP and HTTPS sessions, which allows remote attackers to cause a denial of service (management GUI outage) via multiple TCP connections, aka Bug IDs CSCuj59411, CSCuf89818, and CSCuh05635.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5537
Scores
EPSS
0.0133
EPSS Percentile
67.7%
Details
CWE
CWE-20
Status
published
Products (3)
cisco/content_security_management_appliance
cisco/email_security_appliance_firmware
cisco/web_security_appliance
Published
Oct 24, 2013
Tracked Since
Feb 18, 2026