CVEvulnerability
CVE-2017-6721
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-07-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-20
Description
A vulnerability in the ingress processing of fragmented TCP packets by Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause the WAASNET process to restart unexpectedly, causing a denial of service (DoS) condition. More Information: CSCvc57428. Known Affected Releases: 6.3(1). Known Fixed Releases: 6.3(0.143) 6.2(3c)6 6.2(3.22).
Affected configurations
• cisco wide area application services 6.3\(1\)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.securityfocus.com/bid/99200 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038747 Third Party Advisory, VDB Entry
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-waas Vendor Advisory
- http://www.securityfocus.com/bid/99200 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038747 Third Party Advisory, VDB Entry
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-waas Vendor Advisory