// For flags

CVE-2016-1382

 

Severity Score

7.5
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Cisco AsyncOS before 8.5.3-069 and 8.6 through 8.8 on Web Security Appliance (WSA) devices mishandles memory allocation for HTTP requests, which allows remote attackers to cause a denial of service (proxy-process reload) via a crafted request, aka Bug ID CSCuu02529.

Cisco AsyncOS en versiones anteriores a 8.5.3-069 y 8.6 hasta la versión 8.8 en dispositivos Web Security Appliance (WSA) no maneja correctamente la asignación de memoria para peticiones HTTP, lo que permite a atacantes remotos provocar una denegación de servicio (recarga del proceso-proxy) a través de una petición manipulada, también conocida como Bug ID CSCuu02529.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2016-01-04 CVE Reserved
  • 2016-05-25 CVE Published
  • 2023-03-07 EPSS Updated
  • 2024-08-05 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-20: Improper Input Validation
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Cisco
Search vendor "Cisco"
Web Security Appliance \(wsa\)
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)"
5.6.0-623
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)" and version "5.6.0-623"
-
Affected
in Cisco
Search vendor "Cisco"
Web Security Appliance
Search vendor "Cisco" for product "Web Security Appliance"
--
Safe
Cisco
Search vendor "Cisco"
Web Security Appliance \(wsa\)
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)"
6.0.0-000
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)" and version "6.0.0-000"
-
Affected
in Cisco
Search vendor "Cisco"
Web Security Appliance
Search vendor "Cisco" for product "Web Security Appliance"
--
Safe
Cisco
Search vendor "Cisco"
Web Security Appliance \(wsa\)
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)"
7.1.0
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)" and version "7.1.0"
-
Affected
in Cisco
Search vendor "Cisco"
Web Security Appliance
Search vendor "Cisco" for product "Web Security Appliance"
--
Safe
Cisco
Search vendor "Cisco"
Web Security Appliance \(wsa\)
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)"
7.1.1
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)" and version "7.1.1"
-
Affected
in Cisco
Search vendor "Cisco"
Web Security Appliance
Search vendor "Cisco" for product "Web Security Appliance"
--
Safe
Cisco
Search vendor "Cisco"
Web Security Appliance \(wsa\)
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)"
7.1.2
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)" and version "7.1.2"
-
Affected
in Cisco
Search vendor "Cisco"
Web Security Appliance
Search vendor "Cisco" for product "Web Security Appliance"
--
Safe
Cisco
Search vendor "Cisco"
Web Security Appliance \(wsa\)
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)"
7.1.3
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)" and version "7.1.3"
-
Affected
in Cisco
Search vendor "Cisco"
Web Security Appliance
Search vendor "Cisco" for product "Web Security Appliance"
--
Safe
Cisco
Search vendor "Cisco"
Web Security Appliance \(wsa\)
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)"
7.1.4
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)" and version "7.1.4"
-
Affected
in Cisco
Search vendor "Cisco"
Web Security Appliance
Search vendor "Cisco" for product "Web Security Appliance"
--
Safe
Cisco
Search vendor "Cisco"
Web Security Appliance \(wsa\)
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)"
7.5.0-000
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)" and version "7.5.0-000"
-
Affected
in Cisco
Search vendor "Cisco"
Web Security Appliance
Search vendor "Cisco" for product "Web Security Appliance"
--
Safe
Cisco
Search vendor "Cisco"
Web Security Appliance \(wsa\)
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)"
7.5.0-825
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)" and version "7.5.0-825"
-
Affected
in Cisco
Search vendor "Cisco"
Web Security Appliance
Search vendor "Cisco" for product "Web Security Appliance"
--
Safe
Cisco
Search vendor "Cisco"
Web Security Appliance \(wsa\)
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)"
7.5.1-000
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)" and version "7.5.1-000"
-
Affected
in Cisco
Search vendor "Cisco"
Web Security Appliance
Search vendor "Cisco" for product "Web Security Appliance"
--
Safe
Cisco
Search vendor "Cisco"
Web Security Appliance \(wsa\)
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)"
7.5.2-000
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)" and version "7.5.2-000"
-
Affected
in Cisco
Search vendor "Cisco"
Web Security Appliance
Search vendor "Cisco" for product "Web Security Appliance"
--
Safe
Cisco
Search vendor "Cisco"
Web Security Appliance \(wsa\)
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)"
7.7.0-000
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)" and version "7.7.0-000"
-
Affected
in Cisco
Search vendor "Cisco"
Web Security Appliance
Search vendor "Cisco" for product "Web Security Appliance"
--
Safe
Cisco
Search vendor "Cisco"
Web Security Appliance \(wsa\)
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)"
7.7.1-000
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)" and version "7.7.1-000"
-
Affected
in Cisco
Search vendor "Cisco"
Web Security Appliance
Search vendor "Cisco" for product "Web Security Appliance"
--
Safe
Cisco
Search vendor "Cisco"
Web Security Appliance \(wsa\)
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)"
8.0.0-000
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)" and version "8.0.0-000"
-
Affected
in Cisco
Search vendor "Cisco"
Web Security Appliance
Search vendor "Cisco" for product "Web Security Appliance"
--
Safe
Cisco
Search vendor "Cisco"
Web Security Appliance \(wsa\)
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)"
8.0.5
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)" and version "8.0.5"
-
Affected
in Cisco
Search vendor "Cisco"
Web Security Appliance
Search vendor "Cisco" for product "Web Security Appliance"
--
Safe
Cisco
Search vendor "Cisco"
Web Security Appliance \(wsa\)
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)"
8.0.6
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)" and version "8.0.6"
-
Affected
in Cisco
Search vendor "Cisco"
Web Security Appliance
Search vendor "Cisco" for product "Web Security Appliance"
--
Safe
Cisco
Search vendor "Cisco"
Web Security Appliance \(wsa\)
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)"
8.0.6-078
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)" and version "8.0.6-078"
-
Affected
in Cisco
Search vendor "Cisco"
Web Security Appliance
Search vendor "Cisco" for product "Web Security Appliance"
--
Safe
Cisco
Search vendor "Cisco"
Web Security Appliance \(wsa\)
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)"
8.0.6-119
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)" and version "8.0.6-119"
-
Affected
in Cisco
Search vendor "Cisco"
Web Security Appliance
Search vendor "Cisco" for product "Web Security Appliance"
--
Safe
Cisco
Search vendor "Cisco"
Web Security Appliance \(wsa\)
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)"
8.0.7
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)" and version "8.0.7"
-
Affected
in Cisco
Search vendor "Cisco"
Web Security Appliance
Search vendor "Cisco" for product "Web Security Appliance"
--
Safe
Cisco
Search vendor "Cisco"
Web Security Appliance \(wsa\)
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)"
8.0.7-142
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)" and version "8.0.7-142"
-
Affected
in Cisco
Search vendor "Cisco"
Web Security Appliance
Search vendor "Cisco" for product "Web Security Appliance"
--
Safe
Cisco
Search vendor "Cisco"
Web Security Appliance \(wsa\)
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)"
8.0.8-mr-113
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)" and version "8.0.8-mr-113"
-
Affected
in Cisco
Search vendor "Cisco"
Web Security Appliance
Search vendor "Cisco" for product "Web Security Appliance"
--
Safe
Cisco
Search vendor "Cisco"
Web Security Appliance \(wsa\)
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)"
8.5.0-497
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)" and version "8.5.0-497"
-
Affected
in Cisco
Search vendor "Cisco"
Web Security Appliance
Search vendor "Cisco" for product "Web Security Appliance"
--
Safe
Cisco
Search vendor "Cisco"
Web Security Appliance \(wsa\)
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)"
8.5.0.000
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)" and version "8.5.0.000"
-
Affected
in Cisco
Search vendor "Cisco"
Web Security Appliance
Search vendor "Cisco" for product "Web Security Appliance"
--
Safe
Cisco
Search vendor "Cisco"
Web Security Appliance \(wsa\)
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)"
8.5.1-021
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)" and version "8.5.1-021"
-
Affected
in Cisco
Search vendor "Cisco"
Web Security Appliance
Search vendor "Cisco" for product "Web Security Appliance"
--
Safe
Cisco
Search vendor "Cisco"
Web Security Appliance \(wsa\)
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)"
8.5.2-024
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)" and version "8.5.2-024"
-
Affected
in Cisco
Search vendor "Cisco"
Web Security Appliance
Search vendor "Cisco" for product "Web Security Appliance"
--
Safe
Cisco
Search vendor "Cisco"
Web Security Appliance \(wsa\)
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)"
8.5.2-027
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)" and version "8.5.2-027"
-
Affected
in Cisco
Search vendor "Cisco"
Web Security Appliance
Search vendor "Cisco" for product "Web Security Appliance"
--
Safe
Cisco
Search vendor "Cisco"
Web Security Appliance \(wsa\)
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)"
8.5.3-055
Search vendor "Cisco" for product "Web Security Appliance \(wsa\)" and version "8.5.3-055"
-
Affected
in Cisco
Search vendor "Cisco"
Web Security Appliance
Search vendor "Cisco" for product "Web Security Appliance"
--
Safe