PT-2017-17197 · Cisco · Cisco Wide Area Application Services

Published 2017-05-03 · Updated 2019-10-03 · CVE-2017-6628

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Wide Area Application Services (WAAS) versions 6.2.1 through 6.2.3a

Description A vulnerability in the SMART-SSL Accelerator functionality could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This is due to a Secure Sockets Layer/Transport Layer Security (SSL/TLS) alert being incorrectly handled when in a specific SSL/TLS connection state. An attacker could exploit this by establishing a SMART-SSL connection and sending a crafted stream of SSL/TLS traffic, causing WAN optimization to stop processing traffic for a short period.

Recommendations For Cisco Wide Area Application Services (WAAS) versions 6.2.1 through 6.2.3a, consider temporarily disabling the SMART-SSL Accelerator functionality until a patch is available to prevent exploitation. Restrict access to the SMART-SSL connection to minimize the risk of a denial of service condition. Avoid using the SMART-SSL Accelerator functionality in production environments until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

CWE-399

Related Identifiers

CVE-2017-6628

Affected Products

Cisco Wide Area Application Services

References · 5

• https://osv.dev/vulnerability/CVE-2017-6628 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-waas · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-6628 · Security Note
• http://securitytracker.com/id/1038399 · Note
• http://securityfocus.com/bid/98294 · Note