CVE-2017-6750

Опубликовано: 25 июл. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

A vulnerability in AsyncOS for the Cisco Web Security Appliance (WSA) could allow an unauthenticated, local attacker to log in to the device with the privileges of a limited user or an unauthenticated, remote attacker to authenticate to certain areas of the web GUI, aka a Static Credentials Vulnerability. Affected Products: virtual and hardware versions of Cisco Web Security Appliance (WSA). More Information: CSCve06124. Known Affected Releases: 10.1.0-204. Known Fixed Releases: 10.5.1-270.

Ссылки

http://www.securityfocus.com/bid/99924
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038958
Third Party Advisory
VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-wsa4
Vendor Advisory
http://www.securityfocus.com/bid/99924
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038958
Third Party Advisory
VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-wsa4
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:web_security_appliance:10.0.0-232:*:*:*:*:*:*:*

cpe:2.3:a:cisco:web_security_appliance:10.0.0-233:*:*:*:*:*:*:*

cpe:2.3:a:cisco:web_security_appliance:10.0_base:*:*:*:*:*:*:*

cpe:2.3:a:cisco:web_security_appliance:10.1.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:web_security_appliance:10.1.0-204:*:*:*:*:*:*:*

cpe:2.3:a:cisco:web_security_appliance:10.1.1-230:*:*:*:*:*:*:*

cpe:2.3:a:cisco:web_security_appliance:10.1.1-234:*:*:*:*:*:*:*

cpe:2.3:a:cisco:web_security_appliance:10.1.1-235:*:*:*:*:*:*:*

cpe:2.3:a:cisco:web_security_appliance:10.5.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:web_security_appliance:10.5.0-358:*:*:*:*:*:*:*

cpe:2.3:a:cisco:web_security_virtual_appliance:10.0.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:web_security_virtual_appliance:10.0_base:*:*:*:*:*:*:*

cpe:2.3:a:cisco:web_security_virtual_appliance:10.1.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:web_security_virtual_appliance:10.1.1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:web_security_virtual_appliance:10.1_base:*:*:*:*:*:*:*

cpe:2.3:a:cisco:web_security_virtual_appliance:10.5.1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:web_security_virtual_appliance:10.5_base:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00749

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-1188

Связанные уязвимости

GHSA-8hj4-pmp7-hg69