CVE-2017-12256
First published: Thu Oct 05 2017(Updated: )
A vulnerability in the Akamai Connect feature of Cisco Wide Area Application Services (WAAS) Appliances could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) condition on an affected device. The vulnerability is due to certain file-handling inefficiencies of the affected system. An attacker could exploit this vulnerability by directing client systems to access a corrupted file that the client systems cannot decompress correctly. A successful exploit could allow the attacker to cause the affected device to crash or hang unexpectedly and result in a DoS condition that may require manual intervention to regain normal operating conditions. Cisco Bug IDs: CSCve82472.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Wide Area Application Services |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-12256?
The severity of CVE-2017-12256 is classified as critical due to its potential to cause a denial-of-service condition.
How do I fix CVE-2017-12256?
To fix CVE-2017-12256, apply the software updates provided by Cisco for the affected Wide Area Application Services appliances.
Who is affected by CVE-2017-12256?
CVE-2017-12256 affects Cisco Wide Area Application Services appliances that utilize the Akamai Connect feature.
What type of attack does CVE-2017-12256 facilitate?
CVE-2017-12256 facilitates remote denial-of-service (DoS) attacks against vulnerable Cisco devices.
Is authentication required to exploit CVE-2017-12256?
No, CVE-2017-12256 can be exploited by unauthenticated remote attackers.
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/tags
- agent/event
- agent/type
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- vendor/cisco
- canonical/cisco wide area application services