CVE-2016-1440

MEDIO 5.3CVE-2016-1440 · Published 02/07/2016 · updated 17/06/2026

En resumen

CVE-2016-1440 es una vulnerabilidad MEDIO (CVSS 5.3) que afecta a web security appliance (cisco).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.3%, mayor que el 69.4% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
web security appliance cisco	`= 5.6.0-623= 6.0.0-000= 7.1.0= 7.1.1= 7.1.2= 7.1.3= 7.1.4= 7.5.0-000= 7.5.0-825= 7.5.1-000= 7.5.2-000= 7.5.2-hp2-303= 7.7.0-000= 7.7.0-608= 7.7.1-000= 7.7.5-835= 8.0.0-000= 8.0.5= 8.0.5_hp1= 8.0.6= 8.0.6-078= 8.0.6-119= 8.0.7= 8.0.7-142= 8.0.8-mr-113= 8.5.0-497= 8.5.0.000= 8.5.1-021= 8.5.2-024= 8.5.2-027= 8.5.3-055= 8.8.0-000= 8.8.0-085= 9.0.0-193= 9.0_base= 9.1.0-000= 9.1.0-070`	No fix yet

Description

The proxy process on Cisco Web Security Appliance (WSA) devices through 9.1.0-070 allows remote attackers to cause a denial of service (CPU consumption) by establishing an FTP session and then improperly terminating the control connection after a file transfer, aka Bug ID CSCuy43468.

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160627-wsa · Vendor Advisory
securitytracker.com/id/1036188

Más vulnerabilidades de web security appliance

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

web security appliance

cisco

= 5.6.0-623= 6.0.0-000= 7.1.0= 7.1.1= 7.1.2= 7.1.3= 7.1.4= 7.5.0-000= 7.5.0-825= 7.5.1-000= 7.5.2-000= 7.5.2-hp2-303= 7.7.0-000= 7.7.0-608= 7.7.1-000= 7.7.5-835= 8.0.0-000= 8.0.5= 8.0.5_hp1= 8.0.6= 8.0.6-078= 8.0.6-119= 8.0.7= 8.0.7-142= 8.0.8-mr-113= 8.5.0-497= 8.5.0.000= 8.5.1-021= 8.5.2-024= 8.5.2-027= 8.5.3-055= 8.8.0-000= 8.8.0-085= 9.0.0-193= 9.0_base= 9.1.0-000= 9.1.0-070

No fix yet

Más vulnerabilidades de web security appliance

Ver todo →