CVEvulnerability

CVE-2017-6750

7.5 HIGH Published 2017-07-25 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-07-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-1188

Description

A vulnerability in AsyncOS for the Cisco Web Security Appliance (WSA) could allow an unauthenticated, local attacker to log in to the device with the privileges of a limited user or an unauthenticated, remote attacker to authenticate to certain areas of the web GUI, aka a Static Credentials Vulnerability. Affected Products: virtual and hardware versions of Cisco Web Security Appliance (WSA). More Information: CSCve06124. Known Affected Releases: 10.1.0-204. Known Fixed Releases: 10.5.1-270.

Affected configurations

• cisco web security appliance 10.0.0-232 • cisco web security appliance 10.0.0-233 • cisco web security appliance 10.0 base • cisco web security appliance 10.1.0 • cisco web security appliance 10.1.0-204 • cisco web security appliance 10.1.1-230 • cisco web security appliance 10.1.1-234 • cisco web security appliance 10.1.1-235 • cisco web security appliance 10.5.0 • cisco web security appliance 10.5.0-358 • cisco web security virtual appliance 10.0.0 • cisco web security virtual appliance 10.0 base • cisco web security virtual appliance 10.1.0 • cisco web security virtual appliance 10.1.1 • cisco web security virtual appliance 10.1 base • cisco web security virtual appliance 10.5.1 • cisco web security virtual appliance 10.5 base

Related

Weakness · CWE (1)

  • CWE-1188 Initialization of a Resource with an Insecure Default weakness

References