Lucene search

CiscoCVE-2016-6469

HistoryDec 14, 2016 - 12:59 a.m.

CVE-2016-6469

2016-12-1400:59:08

CWE-399

cisco

web.nvd.nist.gov

cve-2016-6469

cisco

asyncos

web security appliance

wsa

denial of service

dos

vulnerability

http

url parsing

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

48.1%

JSON

A vulnerability in HTTP URL parsing of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) vulnerability due to the proxy process unexpectedly restarting. More Information: CSCvb04312. Known Affected Releases: 9.0.1-162 9.1.1-074. Known Fixed Releases: 10.1.0-129 9.1.2-010.

Affected configurations

Nvd

Node

ciscoweb_security_applianceMatch9.0.1-162

ciscoweb_security_applianceMatch9.1.1-074

VendorProductVersionCPE
ciscoweb_security_appliance9.0.1-162cpe:2.3:a:cisco:web_security_appliance:9.0.1-162:*:*:*:*:*:*:*
ciscoweb_security_appliance9.1.1-074cpe:2.3:a:cisco:web_security_appliance:9.1.1-074:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	web_security_appliance	9.0.1-162	cpe:2.3:a:cisco:web_security_appliance:9.0.1-162:::::::*
cisco	web_security_appliance	9.1.1-074	cpe:2.3:a:cisco:web_security_appliance:9.1.1-074:::::::*

CNA Affected

[
  {
    "product": "Cisco Web Security Appliance (WSA)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco Web Security Appliance (WSA)"
      }
    ]
  }
]

References

www.securityfocus.com/bid/94775

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-wsa

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

48.1%

JSON

Related for CVE-2016-6469