CVE-2016-6407
N/A
Published: September 17, 2016 at 01:00 AM UTC
Updated: June 17, 2026 at 12:50 AM UTC
1 product affected across 1 vendorWeb Security Appliance
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
Cisco AsyncOS through 9.5.0-444 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (link saturation) by making many HTTP requests for overlapping byte ranges simultaneously, aka Bug ID CSCuz27219.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
5.6.0-6236.0.0-07.1.07.1.17.1.27.1.37.1.47.5.0-07.5.0-8257.5.1-07.5.2-07.5.2-hp2-3037.7.0-07.7.0-6087.7.1-07.7.5-8358.0.0-08.0.58.0.68.0.6-1198.0.6-788.0.78.0.7-1428.0.8-mr-1138.5.0-4978.5.0.0008.5.1-218.5.2-248.5.2-278.5.3-558.8.0-08.8.0-859.0.0-1939.0_base9.1.0-09.1.0-709.1_base9.5.0-2359.5.0-2849.5.0-4449.5_base
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (3)
Vendor Advisoryx_refsource_CISCO
Source: [email protected]
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-wsaQuick Info
StatusMODIFIED
CWE
CWE-399
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card