← Back

CVE-2021-34698

nvd nist
Published: Oct 6, 2021Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

A vulnerability in the proxy service of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to exhaust system memory and cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper memory management in the proxy service of an affected device. An attacker could exploit this vulnerability by establishing a large number of HTTPS connections to the affected device. A successful exploit could allow the attacker to cause the system to stop processing new connections, which could result in a DoS condition. Note: Manual intervention may be required to recover from this situation.

Affected (3)

Products: Cisco: Asyncos
1 product
Asyncos
Configuration A
3 vulnerable · 7 platform
Vulnerable SoftwareAffected Versions
Cisco
From 12.0 to 12.0.3-005
From 12.5 to 12.5.2-007
From 14.0 to 14.0.1-014
Running on/withPlatform Versions
Cisco
Web Security Appliance S170
All versions
Cisco
Web Security Appliance S190
All versions
Cisco
Web Security Appliance S380
All versions
Cisco
Web Security Appliance S390
All versions
Cisco
Web Security Appliance S680
All versions
Cisco
Web Security Appliance S690
All versions
Cisco
Web Security Appliance S690x
All versions

Timeline

No history available yet.