PT-2018-8817 · Cisco · Cisco Web Security Appliances

Published 2018-08-15 · Updated 2019-10-09 · CVE-2018-0410

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliances (affected versions not specified)

Description A vulnerability in the web proxy functionality could allow an unauthenticated, remote attacker to exhaust system memory and cause a denial of service (DoS) condition on an affected system. This occurs because the software improperly manages memory resources for TCP connections to a targeted device. An attacker could exploit this by establishing a high number of TCP connections to the data interface of an affected device via IPv4 or IPv6, potentially causing the system to stop processing new connections. System recovery may require manual intervention.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2018-0410

Affected Products

Cisco Web Security Appliances

References · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180815-wsa-dos · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-0410 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-0410 · Security Note
• http://securitytracker.com/id/1041535 · Note
• http://securityfocus.com/bid/105098 · Note