PT-2018-8817 · Cisco · Cisco Web Security Appliances

Publicado 2018-08-15 · Atualizado 2019-10-09 · CVE-2018-0410

Positive Technologies (AI Summary)

CVSS v3.1

8.6

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliances (affected versions not specified)

Description A vulnerability in the web proxy functionality could allow an unauthenticated, remote attacker to exhaust system memory and cause a denial of service (DoS) condition on an affected system. This occurs because the software improperly manages memory resources for TCP connections to a targeted device. An attacker could exploit this by establishing a high number of TCP connections to the data interface of an affected device via IPv4 or IPv6, potentially causing the system to stop processing new connections. System recovery may require manual intervention.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2018-0410

Produtos afetados

Cisco Web Security Appliances

Referências · 5

• http://securitytracker.com/id/1041535 · Nota
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180815-wsa-dos · Aviso do Fabricante
• http://securityfocus.com/bid/105098 · Nota
• https://osv.dev/vulnerability/CVE-2018-0410 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-0410 · Nota de Segurança