7.5

CVE-2016-6407

Cisco AsyncOS through 9.5.0-444 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (link saturation) by making many HTTP requests for overlapping byte ranges simultaneously, aka Bug ID CSCuz27219.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Web Security Appliance Version 5.6.0-623
Cisco ≫ Web Security Appliance Version 6.0.0-000
Cisco ≫ Web Security Appliance Version 7.1.0
Cisco ≫ Web Security Appliance Version 7.1.1
Cisco ≫ Web Security Appliance Version 7.1.2
Cisco ≫ Web Security Appliance Version 7.1.3
Cisco ≫ Web Security Appliance Version 7.1.4
Cisco ≫ Web Security Appliance Version 7.5.0-000
Cisco ≫ Web Security Appliance Version 7.5.0-825
Cisco ≫ Web Security Appliance Version 7.5.1-000
Cisco ≫ Web Security Appliance Version 7.5.2-000
Cisco ≫ Web Security Appliance Version 7.5.2-hp2-303
Cisco ≫ Web Security Appliance Version 7.7.0-000
Cisco ≫ Web Security Appliance Version 7.7.0-608
Cisco ≫ Web Security Appliance Version 7.7.1-000
Cisco ≫ Web Security Appliance Version 7.7.5-835
Cisco ≫ Web Security Appliance Version 8.0.0-000
Cisco ≫ Web Security Appliance Version 8.0.5
Cisco ≫ Web Security Appliance Version 8.0.6
Cisco ≫ Web Security Appliance Version 8.0.6-078
Cisco ≫ Web Security Appliance Version 8.0.6-119
Cisco ≫ Web Security Appliance Version 8.0.7
Cisco ≫ Web Security Appliance Version 8.0.7-142
Cisco ≫ Web Security Appliance Version 8.0.8-mr-113
Cisco ≫ Web Security Appliance Version 8.5.0-497
Cisco ≫ Web Security Appliance Version 8.5.0.000
Cisco ≫ Web Security Appliance Version 8.5.1-021
Cisco ≫ Web Security Appliance Version 8.5.2-024
Cisco ≫ Web Security Appliance Version 8.5.2-027
Cisco ≫ Web Security Appliance Version 8.5.3-055
Cisco ≫ Web Security Appliance Version 8.8.0-000
Cisco ≫ Web Security Appliance Version 8.8.0-085
Cisco ≫ Web Security Appliance Version 9.0.0-193
Cisco ≫ Web Security Appliance Version 9.0_base
Cisco ≫ Web Security Appliance Version 9.1.0-000
Cisco ≫ Web Security Appliance Version 9.1.0-070
Cisco ≫ Web Security Appliance Version 9.1_base
Cisco ≫ Web Security Appliance Version 9.5.0-235
Cisco ≫ Web Security Appliance Version 9.5.0-284
Cisco ≫ Web Security Appliance Version 9.5.0-444
Cisco ≫ Web Security Appliance Version 9.5_base
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.48% 0.825
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-wsa
Vendor Advisory
http://www.securityfocus.com/bid/92955
http://www.securitytracker.com/id/1036829