製品・ソフトウェアに関する情報
Cisco Wide Area Application Services におけるリソース管理に関する脆弱性
Title Cisco Wide Area Application Services におけるリソース管理に関する脆弱性
Summary

Cisco Wide Area Application Services (WAAS) には、リソース管理に関する脆弱性が存在します。 ベンダは、本脆弱性を Bug ID CSCvb71133 として公開しています。

Possible impacts サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution

ベンダ情報および参考情報を参照して適切な対策を実施してください。

Publication Date May 3, 2017, midnight
Registration Date June 7, 2017, 11:55 a.m.
Last Update June 7, 2017, 11:55 a.m.
CVSS3.0 : 警告
Score 6.8
Vector CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS2.0 : 警告
Score 4.3
Vector AV:N/AC:M/Au:N/C:N/I:N/A:P
Affected System
シスコシステムズ
Cisco Wide Area Application Services ソフトウェア 6.2.1
Cisco Wide Area Application Services ソフトウェア 6.2.1a
Cisco Wide Area Application Services ソフトウェア 6.2.3a
CVE (情報セキュリティ 共通脆弱性識別子)
CWE (共通脆弱性タイプ一覧)
ベンダー情報
Change Log
No Changed Details Date of change
0 [2017年06月07日]
  掲載
Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information
CVE-2017-6628
Summary

A vulnerability in SMART-SSL Accelerator functionality for Cisco Wide Area Application Services (WAAS) 6.2.1, 6.2.1a, and 6.2.3a could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition where the WAN optimization could stop functioning while the process restarts. The vulnerability is due to a Secure Sockets Layer/Transport Layer Security (SSL/TLS) alert being incorrectly handled when in a specific SSL/TLS connection state. An attacker could exploit this vulnerability by establishing a SMART-SSL connection through the targeted device. The attacker would then send a crafted stream of SSL/TLS traffic. An exploit could allow the attacker to cause a DoS condition where WAN optimization could stop processing traffic for a short period of time. Cisco Bug IDs: CSCvb71133.

Publication Date May 4, 2017, 6:59 a.m.
Registration Date Jan. 26, 2021, 1:27 p.m.
Last Update Nov. 21, 2024, 12:30 p.m.
Affected software configurations
Configuration1 or higher or less more than less than
cpe:2.3:a:cisco:wide_area_application_services:6.2.1a:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:6.2.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:6.2.3a:*:*:*:*:*:*:*
Related information, measures and tools
Common Vulnerabilities List