Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2016-6437

A vulnerability in the SSL session cache management of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high consumption of disk space. The user would see a performance degradation. More Information: CSCva03095. Known Affected Releases: 5.3(5), 6.1(1), 6.2(1). Known Fixed Releases: 5.3(5g)1, 6.2(2.32).

Published

2016-10-27T21:59:08.733

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 5.9 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

8.6

Impact Score

6.9

Weaknesses
  • Type: Primary
    CWE-399
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application cisco wide_area_application_services 5.3.1 Yes
Application cisco wide_area_application_services 5.3.3 Yes
Application cisco wide_area_application_services 5.3.5 Yes
Application cisco wide_area_application_services 5.3.5a Yes
Application cisco wide_area_application_services 5.3.5b Yes
Application cisco wide_area_application_services 5.3.5c Yes
Application cisco wide_area_application_services 5.3.5d Yes
Application cisco wide_area_application_services 5.3.5e Yes
Application cisco wide_area_application_services 5.3.5f Yes
Application cisco wide_area_application_services 6.1.0 Yes
Application cisco wide_area_application_services 6.1.1 Yes
Application cisco wide_area_application_services 6.2.1 Yes
Application cisco wide_area_application_services 6.2.1a Yes
References