NetSight
IP …
high7.5

CVE-2016-6399

Cisco ACE30 Application Control Engine Module through A5 3.3 and ACE 4700 Application Control Engine appliances through A5 3.3 allow remote attackers to cause …

Impact

Cisco ACE30 Application Control Engine Module through A5 3.3 and ACE 4700 Application Control Engine appliances through A5 3.3 allow remote attackers to cause a denial of service (device reload) via crafted (1) SSL or (2) TLS packets, aka Bug ID CSCvb16317.

Affected products

VendorProductAffected versions
CiscoAce Application Control Engine Module A1
Versions 7a, 7b, 8.0, 8.0a
CiscoAce Application Control Engine Module A3
Versions 1.0, 2.0, 2.2, 2.3, 2.4, 2.5
CiscoAce Application Control Engine Module A4
Versions 1.0, 1.1, 2.0, 2.1a, 2.2, 2.3
CiscoAce Application Control Engine Module A5
Versions 1.0, 1.1, 1.2, 2.0, 2.1, 2.1e
CiscoAce 4700 Series Application Control Engine Appliance
Versions a5\(1.0\), a5\(1.1\), a5\(1.2\), a5\(2.0\), a5\(2.1\), a5\(2.1e\)
CiscoAce 4700 Series Application Control Engine Appliance A1
Versions 7, 7a, 7b, 8.0, 8.0a
CiscoAce 4700 Series Application Control Engine Appliance A3
Versions 1.0, 2.0, 2.2, 2.3, 2.4, 2.5
CiscoAce 4700 Series Application Control Engine Appliance A4
Versions 1.0, 1.1, 2.0, 2.1a, 2.2, 2.3
CiscoAce 4700 Series Application Control Engine Appliance A5
Versions 3.1a, 3.1b, 3.2, 3.3

Weakness classification

CWE-20

References