CVE-2015-6386

Cisco Web Security Appliance - Denial of Service via FTP Passthrough Control Connection

Title source: llm

Description

The passthrough FTP feature on Cisco Web Security Appliance (WSA) devices with software 8.0.7-142 and 8.5.1-021 allows remote attackers to cause a denial of service (CPU consumption) via FTP sessions in which the control connection is ended after data transfer, aka Bug ID CSCut94150.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1034276

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151130-wsa

Scores

EPSS 0.0174

EPSS Percentile 75.4%

Details

CWE

CWE-399

Status published

Products (2)

cisco/web_security_appliance 8.0.7-142

cisco/web_security_appliance 8.5.1-021

Published Dec 01, 2015

Tracked Since Feb 18, 2026