A vulnerability in the proxy service of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to exhaust system memory and cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper memory management in the proxy service of an affected device. An attacker could exploit this vulnerability by establishing a large number of HTTPS connections to the affected device. A successful exploit could allow the attacker to cause the system to stop processing new connections, which could result in a DoS condition. Note: Manual intervention may be required to recover from this situation.
oryginał ENCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HCisco Asyncos
OSCisco12.0 – 12.0.3-005 (bez)12.5 – 12.5.2-007 (bez)14.0 – 14.0.1-014 (bez)Cisco Web Security Appliance S170
HWCiscowszystkie wersjeCisco Web Security Appliance S190
HWCiscowszystkie wersjeCisco Web Security Appliance S380
HWCiscowszystkie wersjeCisco Web Security Appliance S390
HWCiscowszystkie wersjeCisco Web Security Appliance S680
HWCiscowszystkie wersjeCisco Web Security Appliance S690
HWCiscowszystkie wersjeCisco Web Security Appliance S690x
HWCiscowszystkie wersje
Powiązane podatności
RCE z uprawnieniami root w Cisco Secure Email Gateway i Secure Email and Web Manager
A vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated, local attac...
A vulnerability in the DNS-based Authentication of Named Entities (DANE) email verification component of Cisco...
A vulnerability in the email scanning algorithm of Cisco AsyncOS software for Cisco Email Security Appliance (...
A vulnerability in the Cisco Advanced Malware Protection (AMP) for Endpoints integration of Cisco AsyncOS for ...