CVE-2017-6750

Published: Jul 25, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A vulnerability in AsyncOS for the Cisco Web Security Appliance (WSA) could allow an unauthenticated, local attacker to log in to the device with the privileges of a limited user or an unauthenticated, remote attacker to authenticate to certain areas of the web GUI, aka a Static Credentials Vulnerability. Affected Products: virtual and hardware versions of Cisco Web Security Appliance (WSA). More Information: CSCve06124. Known Affected Releases: 10.1.0-204. Known Fixed Releases: 10.5.1-270.

Affected (17)

Products: Cisco: Web Security Appliance, Web Security Virtual Appliance

Cisco

2 products

Web Security Appliance

Web Security Virtual Appliance

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Cisco Web Security Appliance	Version 10.0.0-232
Cisco Web Security Appliance	Version 10.0.0-233
Cisco Web Security Appliance	Version 10.0_base
Cisco Web Security Appliance	Version 10.1.0-204
Cisco Web Security Appliance	Version 10.1.0
Cisco Web Security Appliance	Version 10.1.1-230
Cisco Web Security Appliance	Version 10.1.1-234
Cisco Web Security Appliance	Version 10.1.1-235
Cisco Web Security Appliance	Version 10.5.0-358
Cisco Web Security Appliance	Version 10.5.0
Cisco Web Security Virtual Appliance	Version 10.0.0
Cisco Web Security Virtual Appliance	Version 10.0_base
Cisco Web Security Virtual Appliance	Version 10.1.0
Cisco Web Security Virtual Appliance	Version 10.1.1
Cisco Web Security Virtual Appliance	Version 10.1_base
Cisco Web Security Virtual Appliance	Version 10.5.1
Cisco Web Security Virtual Appliance	Version 10.5_base