CVE-2016-6407
published 2016-09-17CVE-2016-6407: Cisco AsyncOS through 9.5.0-444 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (link saturation) by making many…
PriorityP337high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
EPSS
2.48%
82.8th percentile
Cisco AsyncOS through 9.5.0-444 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (link saturation) by making many HTTP requests for overlapping byte ranges simultaneously, aka Bug ID CSCuz27219.
Affected
42 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | web_security_appliance | — | — |
| cisco | web_security_appliance | — | — |
| cisco | web_security_appliance | — | — |
| cisco | web_security_appliance | — | — |
| cisco | web_security_appliance | — | — |
| cisco | web_security_appliance | — | — |
| cisco | web_security_appliance | — | — |
| cisco | web_security_appliance | — | — |
| cisco | web_security_appliance | — | — |
| cisco | web_security_appliance | — | — |
| cisco | web_security_appliance | — | — |
| cisco | web_security_appliance | — | — |
| cisco | web_security_appliance | — | — |
| cisco | web_security_appliance | — | — |
| cisco | web_security_appliance | — | — |
| cisco | web_security_appliance | — | — |
| cisco | web_security_appliance | — | — |
| cisco | web_security_appliance | — | — |
| cisco | web_security_appliance | — | — |
| cisco | web_security_appliance | — | — |
| cisco | web_security_appliance | — | — |
| cisco | web_security_appliance | — | — |
| cisco | web_security_appliance | — | — |
| cisco | web_security_appliance | — | — |
| cisco | web_security_appliance | — | — |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
vendor_cisco5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Web Security Appliance HTTP Load Denial of Service Vulnerability
vendor_cisco·2016-09-14·CVSS 5.0
CVE-2016-6407 [MEDIUM] CWE-399 Cisco Web Security Appliance HTTP Load Denial of Service Vulnerability
Cisco Web Security Appliance HTTP Load Denial of Service Vulnerability
A vulnerability in HTTP request forwarding with Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to link saturation.
The vulnerability is due to how HTTP data ranges are downloaded from the destination server. An attacker could exploit this vulnerability by sending multiple crafted HTTP requests to the targeted device. An exploit could allow the attacker to trigger multiple simultaneous downloads for the same HTTP data. This could cause a DoS condition due to heavy traffic on the connection to the server.
Cisco has not released software updates that address this vulnerability. Workarounds that address this vulnerabili
Cisco
Cisco Web Security Appliance HTTP Load Denial of Service Vulnerability
vendor_cisco
CVE-2016-6407 Cisco Web Security Appliance HTTP Load Denial of Service Vulnerability
CVE-2016-6407: Cisco Web Security Appliance HTTP Load Denial of Service Vulnerability
A vulnerability in HTTP request forwarding with Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to link saturation. The vulnerability is due to how HTTP data ranges are downloaded from the destination server. An attacker could exploit this vulnerability by sending multiple crafted HTTP requests to the targeted device. An exploit could allow the attacker to trigger multiple simultaneous downloads for the same HTTP data. This could cause a DoS condition due to heavy traffic on the connection to the server. Cisco has not released software updates that address this vulnerability.
CWE: CWE-399, CWE-399
Bug IDs
GHSA
GHSA-83cp-8php-jfpv: Cisco AsyncOS through 9
ghsa_unreviewed·2022-05-17
CVE-2016-6407 [HIGH] GHSA-83cp-8php-jfpv: Cisco AsyncOS through 9
Cisco AsyncOS through 9.5.0-444 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (link saturation) by making many HTTP requests for overlapping byte ranges simultaneously, aka Bug ID CSCuz27219.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-wsahttp://www.securityfocus.com/bid/92955http://www.securitytracker.com/id/1036829http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-wsahttp://www.securityfocus.com/bid/92955http://www.securitytracker.com/id/1036829
2016-09-17
Published