CVE-2015-6421

cifs-ao in the CIFS optimization functionality on Cisco Wide Area Application Service (WAAS) and Virtual WAAS (vWAAS) devices 5.x before 5.3.5d and 5.4 and 5.5 before 5.5.3 allows remote attackers to cause a denial of service (resource consumption and device reload) via crafted network traffic, aka Bug ID CSCus85330.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
ciscoCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 77%
VendorProductVersion
ciscowide_area_application_services
5.1.1
ciscowide_area_application_services
5.1.1a:a
ciscowide_area_application_services
5.1.1b:b
ciscowide_area_application_services
5.1.1c:c
ciscowide_area_application_services
5.1.1d:d
ciscowide_area_application_services
5.2.1
ciscowide_area_application_services
5.2_base:_base
ciscowide_area_application_services
5.3.1
ciscowide_area_application_services
5.3.3
ciscowide_area_application_services
5.3.5
ciscowide_area_application_services
5.3.5a:a
ciscowide_area_application_services
5.3.5b:b
ciscowide_area_application_services
5.3.5c:c
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-waascifs
http://www.securitytracker.com/id/1034831
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-waascifs
http://www.securitytracker.com/id/1034831