First published: Thu Oct 24 2013(Updated: )
The web framework on Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA) devices does not properly manage the state of HTTP and HTTPS sessions, which allows remote attackers to cause a denial of service (management GUI outage) via multiple TCP connections, aka Bug IDs CSCuj59411, CSCuf89818, and CSCuh05635.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco Web Security Appliance | ||
Cisco Content Security Management Virtual Appliance | ||
Cisco Email Security Appliance Firmware |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-5537 is categorized as a denial of service vulnerability that can cause outages in the management GUI.
To mitigate CVE-2013-5537, update your Cisco Web Security Appliance, Email Security Appliance, or Content Security Management Appliance to the latest available firmware version.
CVE-2013-5537 affects Cisco Web Security Appliance, Cisco Email Security Appliance, and Cisco Content Security Management Appliance devices.
CVE-2013-5537 can allow remote attackers to trigger a denial of service, leading to potential management GUI outages.
There are no official workarounds for CVE-2013-5537, and the recommended action is to apply the available firmware updates.