7.5

CVE-2016-6407

Cisco AsyncOS through 9.5.0-444 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (link saturation) by making many HTTP requests for overlapping byte ranges simultaneously, aka Bug ID CSCuz27219.

Data is provided by the National Vulnerability Database (NVD)
Cisco ≫ Web Security Appliance Version5.6.0-623
Cisco ≫ Web Security Appliance Version6.0.0-000
Cisco ≫ Web Security Appliance Version7.1.0
Cisco ≫ Web Security Appliance Version7.1.1
Cisco ≫ Web Security Appliance Version7.1.2
Cisco ≫ Web Security Appliance Version7.1.3
Cisco ≫ Web Security Appliance Version7.1.4
Cisco ≫ Web Security Appliance Version7.5.0-000
Cisco ≫ Web Security Appliance Version7.5.0-825
Cisco ≫ Web Security Appliance Version7.5.1-000
Cisco ≫ Web Security Appliance Version7.5.2-000
Cisco ≫ Web Security Appliance Version7.5.2-hp2-303
Cisco ≫ Web Security Appliance Version7.7.0-000
Cisco ≫ Web Security Appliance Version7.7.0-608
Cisco ≫ Web Security Appliance Version7.7.1-000
Cisco ≫ Web Security Appliance Version7.7.5-835
Cisco ≫ Web Security Appliance Version8.0.0-000
Cisco ≫ Web Security Appliance Version8.0.5
Cisco ≫ Web Security Appliance Version8.0.6
Cisco ≫ Web Security Appliance Version8.0.6-078
Cisco ≫ Web Security Appliance Version8.0.6-119
Cisco ≫ Web Security Appliance Version8.0.7
Cisco ≫ Web Security Appliance Version8.0.7-142
Cisco ≫ Web Security Appliance Version8.0.8-mr-113
Cisco ≫ Web Security Appliance Version8.5.0-497
Cisco ≫ Web Security Appliance Version8.5.0.000
Cisco ≫ Web Security Appliance Version8.5.1-021
Cisco ≫ Web Security Appliance Version8.5.2-024
Cisco ≫ Web Security Appliance Version8.5.2-027
Cisco ≫ Web Security Appliance Version8.5.3-055
Cisco ≫ Web Security Appliance Version8.8.0-000
Cisco ≫ Web Security Appliance Version8.8.0-085
Cisco ≫ Web Security Appliance Version9.0.0-193
Cisco ≫ Web Security Appliance Version9.0_base
Cisco ≫ Web Security Appliance Version9.1.0-000
Cisco ≫ Web Security Appliance Version9.1.0-070
Cisco ≫ Web Security Appliance Version9.1_base
Cisco ≫ Web Security Appliance Version9.5.0-235
Cisco ≫ Web Security Appliance Version9.5.0-284
Cisco ≫ Web Security Appliance Version9.5.0-444
Cisco ≫ Web Security Appliance Version9.5_base
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.75% 0.723
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P