CVE-2016-6407

Published: Sep 17, 2016Modified: May 6, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Cisco AsyncOS through 9.5.0-444 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (link saturation) by making many HTTP requests for overlapping byte ranges simultaneously, aka Bug ID CSCuz27219.

Affected (41)

Products: Cisco: Web Security Appliance

Cisco

1 product

Web Security Appliance

Configuration A

41 vulnerable

Vulnerable Software	Affected Versions
Cisco Web Security Appliance	Version 5.6.0-623
Cisco Web Security Appliance	Version 6.0.0-000
Cisco Web Security Appliance	Version 7.1.0
Cisco Web Security Appliance	Version 7.1.1
Cisco Web Security Appliance	Version 7.1.2
Cisco Web Security Appliance	Version 7.1.3
Cisco Web Security Appliance	Version 7.1.4
Cisco Web Security Appliance	Version 7.5.0-000
Cisco Web Security Appliance	Version 7.5.0-825
Cisco Web Security Appliance	Version 7.5.1-000
Cisco Web Security Appliance	Version 7.5.2-000
Cisco Web Security Appliance	Version 7.5.2-hp2-303
Cisco Web Security Appliance	Version 7.7.0-000
Cisco Web Security Appliance	Version 7.7.0-608
Cisco Web Security Appliance	Version 7.7.1-000
Cisco Web Security Appliance	Version 7.7.5-835
Cisco Web Security Appliance	Version 8.0.0-000
Cisco Web Security Appliance	Version 8.0.5
Cisco Web Security Appliance	Version 8.0.6-078
Cisco Web Security Appliance	Version 8.0.6-119
Cisco Web Security Appliance	Version 8.0.6
Cisco Web Security Appliance	Version 8.0.7-142
Cisco Web Security Appliance	Version 8.0.7
Cisco Web Security Appliance	Version 8.0.8-mr-113
Cisco Web Security Appliance	Version 8.5.0-497
Cisco Web Security Appliance	Version 8.5.0.000
Cisco Web Security Appliance	Version 8.5.1-021
Cisco Web Security Appliance	Version 8.5.2-024
Cisco Web Security Appliance	Version 8.5.2-027
Cisco Web Security Appliance	Version 8.5.3-055
Cisco Web Security Appliance	Version 8.8.0-000
Cisco Web Security Appliance	Version 8.8.0-085
Cisco Web Security Appliance	Version 9.0.0-193
Cisco Web Security Appliance	Version 9.0_base
Cisco Web Security Appliance	Version 9.1.0-000
Cisco Web Security Appliance	Version 9.1.0-070
Cisco Web Security Appliance	Version 9.1_base
Cisco Web Security Appliance	Version 9.5.0-235
Cisco Web Security Appliance	Version 9.5.0-284
Cisco Web Security Appliance	Version 9.5.0-444
Cisco Web Security Appliance	Version 9.5_base