CVE-2014-3285
Cisco Wide Area Application Services (WAAS) 5.3(.5a) and earlier, when SharePoint acceleration is enabled, does not properly parse SharePoint responses, which allows remote attackers to cause a denial of service (application-optimization handler reload)…
Does this matter?
Lower severity and a low EPSS score (2.97%). Track it; it rarely justifies an emergency change on its own.
Description
Cisco Wide Area Application Services (WAAS) 5.3(.5a) and earlier, when SharePoint acceleration is enabled, does not properly parse SharePoint responses, which allows remote attackers to cause a denial of service (application-optimization handler reload) via a crafted SharePoint application, aka Bug ID CSCue47674.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 2.97% probability · 86th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- cisco/wide area application services
- Source
- psirt@cisco.com
References
- http://secunia.com/advisories/58806Permissions Required
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3285Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34395Vendor Advisory
- http://www.securityfocus.com/bid/67696Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030307Third Party Advisory, VDB Entry
- http://secunia.com/advisories/58806Permissions Required
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3285Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34395Vendor Advisory
- http://www.securityfocus.com/bid/67696Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030307Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.