high7.5
CVE-2016-6407
Cisco AsyncOS through 9.5.0-444 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (link saturation) by making many H…
Impact
Cisco AsyncOS through 9.5.0-444 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (link saturation) by making many HTTP requests for overlapping byte ranges simultaneously, aka Bug ID CSCuz27219.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Web Security Appliance | Versions 5.6.0-623, 6.0.0-000, 7.1.0, 7.1.1, 7.1.2, 7.1.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-wsa
- http://www.securityfocus.com/bid/92955
- http://www.securitytracker.com/id/1036829
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-wsa
- http://www.securityfocus.com/bid/92955
- http://www.securitytracker.com/id/1036829