CVE-2014-2196

Опубликовано: 26 мая 2014

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

Cisco Wide Area Application Services (WAAS) 5.1.1 before 5.1.1e, when SharePoint prefetch optimization is enabled, allows remote SharePoint servers to execute arbitrary code via a malformed response, aka Bug ID CSCue18479.

Ссылки

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140521-waas
Vendor Advisory
http://www.securitytracker.com/id/1030265
Third Party Advisory
VDB Entry
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140521-waas
Vendor Advisory
http://www.securitytracker.com/id/1030265
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:wide_area_application_services:5.1.1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:wide_area_application_services:5.1.1:a:*:*:*:*:*:*

cpe:2.3:a:cisco:wide_area_application_services:5.1.1:b:*:*:*:*:*:*

cpe:2.3:a:cisco:wide_area_application_services:5.1.1:c:*:*:*:*:*:*

cpe:2.3:a:cisco:wide_area_application_services:5.1.1:d:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.02983

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-84xf-fv65-wjp3

github

больше 3 лет назад