CVE-2021-34698

published 2021-10-06

CVE-2021-34698: A vulnerability in the proxy service of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to exhaust system…

Priority P3 41 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

A vulnerability in the proxy service of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to exhaust system memory and cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper memory management in the proxy service of an affected device. An attacker could exploit this vulnerability by establishing a large number of HTTPS connections to the affected device. A successful exploit could allow the attacker to cause the system to stop processing new connections, which could result in a DoS condition. Note: Manual intervention may be required to recover from this situation.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
cisco	asyncos	>= 12.0 < 12.0.3-005	12.0.3-005
cisco	asyncos	>= 12.5 < 12.5.2-007	12.5.2-007
cisco	asyncos	>= 14.0 < 14.0.1-014	14.0.1-014
cisco	cisco_web_security_appliance	—	—
cisco	web_security_appliance_proxy_service	—	—

CVSS provenance

nvd v3.1 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

nvd v2.0 7.8 HIGH AV:N/AC:L/Au:N/C:N/I:N/A:C

vendor_cisco 8.6 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-401