PT-2017-17278 · Cisco · Cisco Wide Area Application Services

Publicado 2017-07-10 · Atualizado 2017-07-16 · CVE-2017-6727

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Cisco Wide Area Application Services (WAAS) version 6.2(3a)

Description A vulnerability in the Server Message Block (SMB) protocol could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device due to a process restarting unexpectedly and creating Core Dump files.

Recommendations For Cisco Wide Area Application Services (WAAS) version 6.2(3a), update to version 6.3(0.167), 6.2(3c)5, or 6.2(3.22) to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-6727

Produtos afetados

Cisco Wide Area Application Services

Referências · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-waas · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-6727 · Nota de Segurança
• http://securitytracker.com/id/1038824 · Nota
• https://osv.dev/vulnerability/CVE-2017-6727 · Aviso do Fabricante
• http://securityfocus.com/bid/99483 · Nota