First published: Fri Nov 06 2015(Updated: )
Cisco AsyncOS 8.x before 8.0.8-113, 8.1.x and 8.5.x before 8.5.3-051, 8.6.x and 8.7.x before 8.7.0-171-LD, and 8.8.x before 8.8.0-085 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (memory consumption) via multiple file-range requests, aka Bug ID CSCur39155.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco Web Security Appliance | =8.0.0-000 | |
Cisco Web Security Appliance | =8.0.5 | |
Cisco Web Security Appliance | =8.0.5-hp1 | |
Cisco Web Security Appliance | =8.0.6 | |
Cisco Web Security Appliance | =8.0.6-078 | |
Cisco Web Security Appliance | =8.0.7-142 | |
Cisco Web Security Appliance | =8.0.8-mr-113 | |
Cisco Web Security Appliance | =8.5.0-497 | |
Cisco Web Security Appliance | =8.5.0.000 | |
Cisco Web Security Appliance | =8.5.2-024 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-6293 has been classified as a denial of service vulnerability.
To fix CVE-2015-6293, upgrade your Cisco Web Security Appliance to the latest version as advised in the security advisory.
CVE-2015-6293 affects Cisco AsyncOS versions prior to 8.0.8-113, 8.1.x before 8.5.3-051, 8.6.x and 8.7.x before 8.7.0-171-LD, and 8.8.x before 8.8.0-085.
Yes, CVE-2015-6293 can be exploited remotely by attackers through multiple file-range requests.
The impact of CVE-2015-6293 is memory consumption that leads to denial of service on affected systems.