PT-2019-2042 · Cisco · Cisco Web Security Appliance

Published 2019-05-01 · Updated 2023-03-24 · CVE-2019-1817

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance versions (affected versions not specified)

Description The issue is caused by insufficient validation of input data, specifically HTTP and HTTPS requests. This could allow a remote attacker to cause a denial of service (DoS) condition on the affected device by sending a malformed HTTP or HTTPS request. The exploitation of this issue may result in a restart of the web proxy process, leading to a temporary DoS condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2019-01787

CVE-2019-1817

Affected Products

Cisco Web Security Appliance

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-1817 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-wsa-dos · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-1817 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-01787 · Security Note