CVE-2016-1440 — Cisco WEB Security Appliance vulnerability

CWE-3994 documents4 sources
Severity
5.3MEDIUMNVD
EPSS
0.4%
top 36.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco WEB Security Appliance
Timeline
PublishedJul 2
Latest updateMay 17

Description

The proxy process on Cisco Web Security Appliance (WSA) devices through 9.1.0-070 allows remote attackers to cause a denial of service (CPU consumption) by establishing an FTP session and then improperly terminating the control connection after a file transfer, aka Bug ID CSCuy43468.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 3.9 | Impact: 1.4

Affected Packages1 packages

▶NVDcisco/web_security_appliance37 versions+36

🔴Vulnerability Details

2
GHSA
GHSA-cvp2-329m-h3w4: The proxy process on Cisco Web Security Appliance (WSA) devices through 9↗2022-05-17
▶
CVEList
CVE-2016-1440: The proxy process on Cisco Web Security Appliance (WSA) devices through 9↗2016-07-02
▶

📋Vendor Advisories

1
Cisco
Cisco Web Security Appliance Native FTP Denial of Service Vulnerability↗2016-06-27
▶
CVE-2016-1440 — Cisco vulnerability | cvebase