// For flags

CVE-2015-6386

 

Severity Score

5.0
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

The passthrough FTP feature on Cisco Web Security Appliance (WSA) devices with software 8.0.7-142 and 8.5.1-021 allows remote attackers to cause a denial of service (CPU consumption) via FTP sessions in which the control connection is ended after data transfer, aka Bug ID CSCut94150.

La funcionalidad passthroug FTP en dispositivos Cisco Web Security Appliance (WSA) con software 8.0.7-142 y 8.5.1-021 permite a atacantes remotos provocar una denegación de servicio (consumo de CPU) a través de sesiones FTP en las que la conexión de control está finalizada después de la trasnferencia de datos, también conocida como Bug ID CSCut94150.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2015-08-17 CVE Reserved
  • 2015-12-01 CVE Published
  • 2023-03-08 EPSS Updated
  • 2024-08-06 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-399: Resource Management Errors
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Cisco
Search vendor "Cisco"
 Web Security Appliance
Search vendor "Cisco" for product "Web Security Appliance"
 8.0.7-142
Search vendor "Cisco" for product "Web Security Appliance" and version "8.0.7-142"
-
Affected
Cisco
Search vendor "Cisco"
 Web Security Appliance
Search vendor "Cisco" for product "Web Security Appliance"
 8.5.1-021
Search vendor "Cisco" for product "Web Security Appliance" and version "8.5.1-021"
-
Affected