FKIE_CVE-2016-1440

Vulnerability from fkie_nvd - Published: 2016-07-02 14:59 - Updated: 2025-04-12 10:46
Severity ?
5.3 (Medium) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Summary
The proxy process on Cisco Web Security Appliance (WSA) devices through 9.1.0-070 allows remote attackers to cause a denial of service (CPU consumption) by establishing an FTP session and then improperly terminating the control connection after a file transfer, aka Bug ID CSCuy43468.
References
psirt@cisco.comhttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160627-wsaVendor Advisory
psirt@cisco.comhttp://www.securitytracker.com/id/1036188
af854a3a-2127-422b-91ae-364da2661108http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160627-wsaVendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id/1036188
Impacted products
Vendor Product Version
cisco web_security_appliance 5.6.0-623
cisco web_security_appliance 6.0.0-000
cisco web_security_appliance 7.1.0
cisco web_security_appliance 7.1.1
cisco web_security_appliance 7.1.2
cisco web_security_appliance 7.1.3
cisco web_security_appliance 7.1.4
cisco web_security_appliance 7.5.0-000
cisco web_security_appliance 7.5.0-825
cisco web_security_appliance 7.5.1-000
cisco web_security_appliance 7.5.2-000
cisco web_security_appliance 7.5.2-hp2-303
cisco web_security_appliance 7.7.0-000
cisco web_security_appliance 7.7.0-608
cisco web_security_appliance 7.7.1-000
cisco web_security_appliance 7.7.5-835
cisco web_security_appliance 8.0.0-000
cisco web_security_appliance 8.0.5
cisco web_security_appliance 8.0.5_hp1
cisco web_security_appliance 8.0.6
cisco web_security_appliance 8.0.6-078
cisco web_security_appliance 8.0.6-119
cisco web_security_appliance 8.0.7
cisco web_security_appliance 8.0.7-142
cisco web_security_appliance 8.0.8-mr-113
cisco web_security_appliance 8.5.0-497
cisco web_security_appliance 8.5.0.000
cisco web_security_appliance 8.5.1-021
cisco web_security_appliance 8.5.2-024
cisco web_security_appliance 8.5.2-027
cisco web_security_appliance 8.5.3-055
cisco web_security_appliance 8.8.0-000
cisco web_security_appliance 8.8.0-085
cisco web_security_appliance 9.0.0-193
cisco web_security_appliance 9.0_base
cisco web_security_appliance 9.1.0-000
cisco web_security_appliance 9.1.0-070
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:5.6.0-623:*:*:*:*:*:*:*",
              "matchCriteriaId": "3463A482-F89B-4136-AEB3-EB20EA0160A1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:6.0.0-000:*:*:*:*:*:*:*",
              "matchCriteriaId": "B10586A4-2BB8-4193-927D-F1775797E4BC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:7.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "115E5118-AB49-4CAF-9DA2-712AA6605C21",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:7.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "E320F3AC-9C05-409F-BB54-E3FB1BAAE063",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:7.1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "900CE698-301B-4B56-B441-D925E924FE36",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:7.1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "F148C6AE-7B86-4AED-AFE0-9D91A8142005",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:7.1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "83910933-0B59-453C-B015-99D2CDE7DF3F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:7.5.0-000:*:*:*:*:*:*:*",
              "matchCriteriaId": "D3F89337-B550-4985-BA36-31695D1865C7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:7.5.0-825:*:*:*:*:*:*:*",
              "matchCriteriaId": "2FC6B22F-CDA0-4EFA-A370-D00D0CD138DD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:7.5.1-000:*:*:*:*:*:*:*",
              "matchCriteriaId": "0DFC3A10-C014-4B25-A4EF-96241DF06379",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:7.5.2-000:*:*:*:*:*:*:*",
              "matchCriteriaId": "7197CAB4-01ED-4502-89FA-DB5E3B0B6435",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:7.5.2-hp2-303:*:*:*:*:*:*:*",
              "matchCriteriaId": "2A4976F9-1C44-45C2-9C40-420376911113",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:7.7.0-000:*:*:*:*:*:*:*",
              "matchCriteriaId": "9156B2AE-89FD-4702-A99F-32DE2E9C3A36",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:7.7.0-608:*:*:*:*:*:*:*",
              "matchCriteriaId": "64E907A2-C0C9-4288-BAA7-B36D112EE4CA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:7.7.1-000:*:*:*:*:*:*:*",
              "matchCriteriaId": "085D1356-236E-4C35-8C82-7F9BA758C46C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:7.7.5-835:*:*:*:*:*:*:*",
              "matchCriteriaId": "A276AE73-EF2D-4D0F-83D6-02CCACFA373D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:8.0.0-000:*:*:*:*:*:*:*",
              "matchCriteriaId": "33C867BF-2CD0-4058-9738-22C769B03D97",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:8.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "AFBF729F-2AD0-4291-AF41-184CCA230D28",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:8.0.5_hp1:*:*:*:*:*:*:*",
              "matchCriteriaId": "865FE706-EA2B-4170-B0CD-148EA310D051",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:8.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "9D8750D2-5250-43BE-AC50-981902C0CF5C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:8.0.6-078:*:*:*:*:*:*:*",
              "matchCriteriaId": "A5A171CD-A1FB-44AE-B252-9916626AEEDD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:8.0.6-119:*:*:*:*:*:*:*",
              "matchCriteriaId": "D6003553-A114-42E0-B817-D176F3A6112B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:8.0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "892F3569-985A-43FD-8A65-440A528A29FD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:8.0.7-142:*:*:*:*:*:*:*",
              "matchCriteriaId": "7514E1C3-42DC-4738-AF6C-3004FAC5BD6C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:8.0.8-mr-113:*:*:*:*:*:*:*",
              "matchCriteriaId": "C62AB23C-9F58-403D-B0E7-8ED3F5A4FE1B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:8.5.0-497:*:*:*:*:*:*:*",
              "matchCriteriaId": "3E9AF842-92F9-43A7-834A-0FFB3B619EDA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:8.5.0.000:*:*:*:*:*:*:*",
              "matchCriteriaId": "27B25873-F2FA-4876-9222-362EDC3FB00A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:8.5.1-021:*:*:*:*:*:*:*",
              "matchCriteriaId": "8C75625C-3C19-4449-B992-279325170CD2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:8.5.2-024:*:*:*:*:*:*:*",
              "matchCriteriaId": "4954BDC0-0A4B-4EF7-BFD2-2FF6FAE2FCA4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:8.5.2-027:*:*:*:*:*:*:*",
              "matchCriteriaId": "F4F98B8B-8B27-4253-B8EF-5782F57DB654",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:8.5.3-055:*:*:*:*:*:*:*",
              "matchCriteriaId": "729E3778-4BCA-46C6-AF3D-A2C10CDDB1F1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:8.8.0-000:*:*:*:*:*:*:*",
              "matchCriteriaId": "02CDB2C1-E72C-49A3-B96D-433A9F6A3716",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:8.8.0-085:*:*:*:*:*:*:*",
              "matchCriteriaId": "4F98FEDA-89EF-40BA-BBD3-3EBD6DD33EE6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:9.0.0-193:*:*:*:*:*:*:*",
              "matchCriteriaId": "5AD5471D-6A95-4BF2-9ECB-3F7AE74BCE57",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:9.0_base:*:*:*:*:*:*:*",
              "matchCriteriaId": "04E5E7DC-1197-49BD-8D83-E69015F25622",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:9.1.0-000:*:*:*:*:*:*:*",
              "matchCriteriaId": "7703E48F-6AAE-42DF-91E4-7205E9A7AD1D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:web_security_appliance:9.1.0-070:*:*:*:*:*:*:*",
              "matchCriteriaId": "8782B7BC-03C5-4866-9807-14EF9A818EB1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The proxy process on Cisco Web Security Appliance (WSA) devices through 9.1.0-070 allows remote attackers to cause a denial of service (CPU consumption) by establishing an FTP session and then improperly terminating the control connection after a file transfer, aka Bug ID CSCuy43468."
    },
    {
      "lang": "es",
      "value": "El proceso proxy en dispositivos Cisco Web Security Appliance (WSA) hasta la versi\u00f3n 9.1.0-070 permite a atacantes remotos causar una denegaci\u00f3n de servicios (consumo de CPU) estableciendo una sesi\u00f3n FTP y entonces terminando inapropiadamente el control de conexi\u00f3n despu\u00e9s de una transferencia de archivo, tambi\u00e9n conocido como Bug ID CSCuy43468."
    }
  ],
  "id": "CVE-2016-1440",
  "lastModified": "2025-04-12T10:46:40.837",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "LOW",
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "version": "3.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 1.4,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2016-07-02T14:59:09.273",
  "references": [
    {
      "source": "psirt@cisco.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160627-wsa"
    },
    {
      "source": "psirt@cisco.com",
      "url": "http://www.securitytracker.com/id/1036188"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160627-wsa"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id/1036188"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.