7.5
CVSSv3

CVE-2015-6421

Published: 27/01/2016 Updated: 07/12/2016
CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 694
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Summary

cifs-ao in the CIFS optimization functionality on Cisco Wide Area Application Service (WAAS) and Virtual WAAS (vWAAS) devices 5.x prior to 5.3.5d and 5.4 and 5.5 prior to 5.5.3 allows remote malicious users to cause a denial of service (resource consumption and device reload) via crafted network traffic, aka Bug ID CSCus85330.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco wide area application services 5.3.5

cisco wide area application services 5.3.3

cisco wide area application services 5.3.1

cisco wide area application services 5.2.1

cisco wide area application services 5.3.5c

cisco wide area application services 5.3.5b

cisco wide area application services 5.1.1c

cisco wide area application services 5.1.1b

cisco wide area application services 5.1.1d

cisco wide area application services 5.3.5a

cisco wide area application services 5.1.1a

cisco wide area application services 5.1.1

cisco wide area application services 5.2_base

Vendor Advisories

A vulnerability in the Common Internet File System (CIFS) optimization feature of the Cisco Wide Area Application Service (WAAS) device could allow an unauthenticated, remote attacker to perform a resource consumption attack which, could result in a complete denial of service (DoS) condition The vulnerability is due to insufficient flow handling ...