| Vulnerability Name: | CVE-2013-5537 (CCN-88242) | ||||||||
| Assigned: | 2013-10-23 | ||||||||
| Published: | 2013-10-23 | ||||||||
| Updated: | 2018-10-30 | ||||||||
| Summary: | The web framework on Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA) devices does not properly manage the state of HTTP and HTTPS sessions, which allows remote attackers to cause a denial of service (management GUI outage) via multiple TCP connections, aka Bug IDs CSCuj59411, CSCuf89818, and CSCuh05635. | ||||||||
| CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
| ||||||||
| CVSS v2 Severity: | 7.8 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C) 5.8 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-20 | ||||||||
| Vulnerability Consequences: | Denial of Service | ||||||||
| References: | Source: MITRE Type: CNA CVE-2013-5537 Source: CCN Type: SA55440 Cisco Multiple Products Management GUI Denial of Service Vulnerability Source: CCN Type: Cisco Security Notice Cisco WSA, ESA, and SMA Management GUI Denial of Service Vulnerability Source: CISCO Type: Vendor Advisory 20131022 Cisco WSA, ESA, and SMA Management GUI Denial of Service Vulnerability Source: CCN Type: OSVDB ID: 98883 Cisco Multiple Appliance HTTP(S) Traffic Handling Remote DoS Source: CCN Type: BID-63280 Multiple Cisco Appliances CVE-2013-5537 Denial of Service Vulnerability Source: XF Type: UNKNOWN cisco-cve20135537-dos(88242) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration 2: Configuration 3: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||