Vulnslist

find the latest Cisco vulnerabilities

Cisco Wide Area Application Services Core Dump Denial of Service Vulnerability

cisco-sa-20170705-waas · Medium · Published · Updated

A vulnerability in the Server Message Block (SMB) protocol of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device due to a process restarting unexpectedly. The vulnerability is due to incomplete input validation of an SMB Create Request packet. An attacker could exploit this vulnerability by sending a specially crafted Create Request packet to an affected device. An exploit could allow an attacker to cause a process to reload unexpectedly and cause a DoS condition. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-waas

Cisco advisory ·CSAF JSON

Workarounds

There are no workarounds that address this vulnerability.

CVEsCVE-2017-6727
Cisco Bug IDsCSCvc63035
CVSS ScoreBase 5.8
Base 5.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L/E:X/RL:X/RC:X
Product Names From Source
Cisco Wide Area Application Services (WAAS)

CSAF Product Statuses

Product Status Source CVE Rows
Cisco Wide Area Application Services (WAAS) known_affected cisco_csaf CVE-2017-6727 1

Related Products

Product CVE Evidence
Cisco Wide Area Application Services (WAAS) CVE-2017-6727 Cisco OpenVuln
Cisco Wide Area Application Services Software CVE-2017-6727 Cisco OpenVuln