CVE-2016-6437: Cisco Wide Area Application Services

Medium severity, CVSS 5.9. EPSS: 1.7% chance of exploitation in the next 30 days.

A vulnerability in the SSL session cache management of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high consumption of disk space. The user would see a performance degradation. More Information: CSCva03095. Known Affected Releases: 5.3(5), 6.1(1), 6.2(1). Known Fixed Releases: 5.3(5g)1, 6.2(2.32).

Affected products

• Cisco Wide Area Application Services: version 5.3.1 only; version 5.3.3 only; version 5.3.5 only; version 5.3.5a only; version 5.3.5b only; version 5.3.5c only; …

Published 2016-10-27. Last modified 2026-06-17.