PT-2019-2042 · Cisco · Cisco Web Security Appliance

CVE-2019-1817 · Publicado 2019-05-01 · Atualizado 2023-03-24

Positive Technologies (AI Summary)

CVSS v3.1

8.6

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance versions (affected versions not specified)

Description The issue is caused by insufficient validation of input data, specifically HTTP and HTTPS requests. This could allow a remote attacker to cause a denial of service (DoS) condition on the affected device by sending a malformed HTTP or HTTPS request. The exploitation of this issue may result in a restart of the web proxy process, leading to a temporary DoS condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2019-01787

CVE-2019-1817

Produtos afetados

Cisco Web Security Appliance

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-1817 · Nota de Segurança
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-wsa-dos · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-1817 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-01787 · Nota de Segurança