Vulnerability Database

289,784

Total vulnerabilities in the database

CVE-2015-6293

Cisco AsyncOS 8.x before 8.0.8-113, 8.1.x and 8.5.x before 8.5.3-051, 8.6.x and 8.7.x before 8.7.0-171-LD, and 8.8.x before 8.8.0-085 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (memory consumption) via multiple file-range requests, aka Bug ID CSCur39155.

  • Published: Nov 6, 2015
  • Updated: Apr 13, 2023
  • CVE: CVE-2015-6293
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.8
  • AV:N/AC:L/Au:N/C:N/I:N/A:C

CWEs:

Software From Fixed in
cisco / web_security_appliance 8.0.6-078 8.0.6-078.x
cisco / web_security_appliance 8.5.0.000 8.5.0.000.x
cisco / web_security_appliance 8.0.5-hp1 8.0.5-hp1.x
cisco / web_security_appliance 8.0.7-142 8.0.7-142.x
cisco / web_security_appliance 8.0.0-000 8.0.0-000.x
cisco / web_security_appliance 8.5.2-024 8.5.2-024.x
cisco / web_security_appliance 8.0.6 8.0.6.x
cisco / web_security_appliance 8.0.8-mr-113 8.0.8-mr-113.x
cisco / web_security_appliance 8.5.0-497 8.5.0-497.x
cisco / web_security_appliance 8.0.5 8.0.5.x