CVE-2016-6437

MEDIUM

Cisco WAAS <5.3(5g)1/6.x<6.2(2.32) - Unauthenticated DoS via SSL Cache

Title source: llm
STIX 2.1

Description

A vulnerability in the SSL session cache management of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high consumption of disk space. The user would see a performance degradation. More Information: CSCva03095. Known Affected Releases: 5.3(5), 6.1(1), 6.2(1). Known Fixed Releases: 5.3(5g)1, 6.2(2.32).

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1037002
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/93524

Scores

CVSS v3 5.9
EPSS 0.0173
EPSS Percentile 75.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-399
Status published
Products (14)
cisco/wide_area_application_services 5.3.1
cisco/wide_area_application_services 5.3.3
cisco/wide_area_application_services 5.3.5
cisco/wide_area_application_services 5.3.5a
cisco/wide_area_application_services 5.3.5b
cisco/wide_area_application_services 5.3.5c
cisco/wide_area_application_services 5.3.5d
cisco/wide_area_application_services 5.3.5e
cisco/wide_area_application_services 5.3.5f
cisco/wide_area_application_services 6.1.0
... and 4 more
Published Oct 27, 2016
Tracked Since Feb 18, 2026