VAR-201405-0355
Vulnerability from variot - Updated: 2025-04-13 23:31Cisco Wide Area Application Services (WAAS) 5.3(.5a) and earlier, when SharePoint acceleration is enabled, does not properly parse SharePoint responses, which allows remote attackers to cause a denial of service (application-optimization handler reload) via a crafted SharePoint application, aka Bug ID CSCue47674. Cisco Wide Area Application Services is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the affected device to reload, denying service to legitimate users. This issue is being tracked by Cisco Bug ID CSCue47674. This software is mainly used in the link environment with small bandwidth and large delay. There is a security vulnerability in Cisco WAAS 5.3(.5a) and earlier versions. The vulnerability is caused by the program not correctly parsing the SharePoint response when using the SharePoint acceleration function
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201405-0355",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "wide area application services",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "5.1\\(.1f\\)"
},
{
"model": "wide area application services",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "5.1\\(.1a\\)"
},
{
"model": "wide area application services",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "5.1"
},
{
"model": "wide area application services",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "5.1\\(.1d\\)"
},
{
"model": "wide area application services",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "5.1\\(.1c\\)"
},
{
"model": "wide area application services",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "5.1\\(.1b\\)"
},
{
"model": "wide area application services",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "5.1\\(.1e\\)"
},
{
"model": "wide area application services",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "5.1\\(.1\\)"
},
{
"model": "wide area application services",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "5.3\\(.5\\)"
},
{
"model": "wide area application services",
"scope": "lte",
"trust": 1.0,
"vendor": "cisco",
"version": "5.3\\(.5a\\)"
},
{
"model": "wide area application services",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "5.2"
},
{
"model": "wide area application services",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "5.3"
},
{
"model": "wide area application services",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "5.3\\(.3\\)"
},
{
"model": "wide area application services",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "5.3\\(.1\\)"
},
{
"model": "wide area application services",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "5.2\\(.1\\)"
},
{
"model": "wide area application engine",
"scope": null,
"trust": 0.8,
"vendor": "cisco",
"version": null
},
{
"model": "wide area application services software",
"scope": "lte",
"trust": 0.8,
"vendor": "cisco",
"version": "5.3(.5a)"
},
{
"model": "wide area application services",
"scope": "eq",
"trust": 0.6,
"vendor": "cisco",
"version": "5.3\\(.5a\\)"
},
{
"model": "wide area application services",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "5.2.1"
},
{
"model": "wide area application services",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "5.1.1"
},
{
"model": "wide area application services",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "5.3.5"
},
{
"model": "wide area application services",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "5.3.3"
},
{
"model": "wide area application services 5.1.1f",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "wide area application services 5.1.1e",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "wide area application services 5.1.1d",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "wide area application services 5.1.1c",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "wide area application services 5.1.1b",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "wide area application services 5.1.1a",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "wide area application services 5.3.5a",
"scope": null,
"trust": 0.3,
"vendor": "cisco",
"version": null
},
{
"model": "wide area application services",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "5.3.1"
}
],
"sources": [
{
"db": "BID",
"id": "67696"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002682"
},
{
"db": "CNNVD",
"id": "CNNVD-201405-567"
},
{
"db": "NVD",
"id": "CVE-2014-3285"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:cisco:wide_area_application_engine",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:cisco:wide_area_application_services",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2014-002682"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cisco",
"sources": [
{
"db": "BID",
"id": "67696"
}
],
"trust": 0.3
},
"cve": "CVE-2014-3285",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "CVE-2014-3285",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "VHN-71225",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:N/I:N/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2014-3285",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2014-3285",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNNVD",
"id": "CNNVD-201405-567",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-71225",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-71225"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002682"
},
{
"db": "CNNVD",
"id": "CNNVD-201405-567"
},
{
"db": "NVD",
"id": "CVE-2014-3285"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cisco Wide Area Application Services (WAAS) 5.3(.5a) and earlier, when SharePoint acceleration is enabled, does not properly parse SharePoint responses, which allows remote attackers to cause a denial of service (application-optimization handler reload) via a crafted SharePoint application, aka Bug ID CSCue47674. Cisco Wide Area Application Services is prone to a remote denial-of-service vulnerability. \nAn attacker can exploit this issue to cause the affected device to reload, denying service to legitimate users. \nThis issue is being tracked by Cisco Bug ID CSCue47674. This software is mainly used in the link environment with small bandwidth and large delay. There is a security vulnerability in Cisco WAAS 5.3(.5a) and earlier versions. The vulnerability is caused by the program not correctly parsing the SharePoint response when using the SharePoint acceleration function",
"sources": [
{
"db": "NVD",
"id": "CVE-2014-3285"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002682"
},
{
"db": "BID",
"id": "67696"
},
{
"db": "VULHUB",
"id": "VHN-71225"
}
],
"trust": 1.98
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2014-3285",
"trust": 2.8
},
{
"db": "BID",
"id": "67696",
"trust": 1.4
},
{
"db": "SECUNIA",
"id": "58806",
"trust": 1.1
},
{
"db": "SECTRACK",
"id": "1030307",
"trust": 1.1
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002682",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201405-567",
"trust": 0.7
},
{
"db": "CISCO",
"id": "20140528 CISCO WAAS PARTIAL DENIAL OF SERVICE VULNERABILITY",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-71225",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-71225"
},
{
"db": "BID",
"id": "67696"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002682"
},
{
"db": "CNNVD",
"id": "CNNVD-201405-567"
},
{
"db": "NVD",
"id": "CVE-2014-3285"
}
]
},
"id": "VAR-201405-0355",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-71225"
}
],
"trust": 0.01
},
"last_update_date": "2025-04-13T23:31:39.076000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Cisco WAAS Partial Denial of Service Vulnerability",
"trust": 0.8,
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3285"
},
{
"title": "34395",
"trust": 0.8,
"url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=34395"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2014-002682"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-20",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-71225"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002682"
},
{
"db": "NVD",
"id": "CVE-2014-3285"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.0,
"url": "http://tools.cisco.com/security/center/content/ciscosecuritynotice/cve-2014-3285"
},
{
"trust": 2.0,
"url": "http://tools.cisco.com/security/center/viewalert.x?alertid=34395"
},
{
"trust": 1.1,
"url": "http://www.securityfocus.com/bid/67696"
},
{
"trust": 1.1,
"url": "http://www.securitytracker.com/id/1030307"
},
{
"trust": 1.1,
"url": "http://secunia.com/advisories/58806"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-3285"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2014-3285"
},
{
"trust": 0.3,
"url": "http://www.cisco.com/"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-71225"
},
{
"db": "BID",
"id": "67696"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002682"
},
{
"db": "CNNVD",
"id": "CNNVD-201405-567"
},
{
"db": "NVD",
"id": "CVE-2014-3285"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-71225"
},
{
"db": "BID",
"id": "67696"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002682"
},
{
"db": "CNNVD",
"id": "CNNVD-201405-567"
},
{
"db": "NVD",
"id": "CVE-2014-3285"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2014-05-29T00:00:00",
"db": "VULHUB",
"id": "VHN-71225"
},
{
"date": "2014-05-28T00:00:00",
"db": "BID",
"id": "67696"
},
{
"date": "2014-06-02T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2014-002682"
},
{
"date": "2014-05-29T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201405-567"
},
{
"date": "2014-05-29T17:55:05.397000",
"db": "NVD",
"id": "CVE-2014-3285"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2016-09-07T00:00:00",
"db": "VULHUB",
"id": "VHN-71225"
},
{
"date": "2014-05-28T00:00:00",
"db": "BID",
"id": "67696"
},
{
"date": "2014-06-02T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2014-002682"
},
{
"date": "2014-06-03T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201405-567"
},
{
"date": "2025-04-12T10:46:40.837000",
"db": "NVD",
"id": "CVE-2014-3285"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201405-567"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cisco Wide Area Application Services Service disruption in (DoS) Vulnerabilities",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2014-002682"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "input validation",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201405-567"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…