CVE-2014-3285

CWE-20 — Improper Input ValidationCWE-1894 documents4 sources
Severity
5.0MEDIUM
EPSS
1.1%
top 21.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Wide Area Application Services
Timeline
PublishedMay 29
Latest updateMay 17

Description

Cisco Wide Area Application Services (WAAS) 5.3(.5a) and earlier, when SharePoint acceleration is enabled, does not properly parse SharePoint responses, which allows remote attackers to cause a denial of service (application-optimization handler reload) via a crafted SharePoint application, aka Bug ID CSCue47674.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-2m32-48rp-7qjw: Cisco Wide Area Application Services (WAAS) 5↗2022-05-17
▶
CVEList
CVE-2014-3285: Cisco Wide Area Application Services (WAAS) 5↗2014-05-29
▶

📋Vendor Advisories

1
Cisco
Cisco Wide Area Application Services Partial Denial of Service Vulnerability↗2014-05-28
▶
CVE-2014-3285 (MEDIUM CVSS 5) | Cisco Wide Area Application Service | cvebase.io