First published: Mon Jul 10 2017(Updated: )
A vulnerability in the Server Message Block (SMB) protocol of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device due to a process restarting unexpectedly and creating Core Dump files. More Information: CSCvc63035. Known Affected Releases: 6.2(3a). Known Fixed Releases: 6.3(0.167) 6.2(3c)5 6.2(3.22).
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco Wide Area Application Services | =6.2\(3a\) |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-6727 has a severity rating that indicates a potential denial of service condition affecting Cisco WAAS devices.
To mitigate CVE-2017-6727, upgrade to the latest version of Cisco Wide Area Application Services that addresses this vulnerability.
An unauthenticated remote attacker can exploit CVE-2017-6727 to cause a denial of service by triggering unexpected process restarts.
CVE-2017-6727 specifically affects Cisco Wide Area Application Services version 6.2(3a).
There are no publicly documented workarounds for CVE-2017-6727, so upgrading to a patched version is recommended.