CVE-2015-6290

Vulnerability Summary

A vulnerability in the web interface of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote malicious user to cause a partial denial of service (DoS) condition due to memory management failures during processing of TCP connections. The vulnerability is due to the improper handling of a malformed HTTP server responses. An unauthenticated, remote attacker with a privileged network position could exploit the vulnerability by conducting a man-in-the-middle (MitM) attack and supplying malformed HTTP server responses to the vulnerable device. A successful exploit could allow the malicious user to cause the device to improperly close TCP connections and fail to free memory resources, resulting in a partial DoS condition. Cisco has confirmed the vulnerability; however, software updates are not available. To exploit the vulnerability, the attacker would need to send crafted HTTP requests to the targeted system through the WSA web interface. Because the attacker does not need to authenticate to send the crafted HTTP requests, the likelihood of an exploit is increased.

Vendor Advisories

References