Cisco Wide Area Application Services vulnerabilities

20 CVEs affecting Cisco Wide Area Application Services, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-1438, published 2021-05-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-3443, published 2013-08-01. High severity, CVSS 10.0. EPSS: 6% chance of exploitation in the next 30 days. The web service framework in Cisco WAAS Software 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1 in a Central Manager (CM) configuration allows remote attackers to execute…
CVE-2013-3444, published 2013-08-01. High severity, CVSS 9.0. EPSS: 4.2% chance of exploitation in the next 30 days. The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before…
CVE-2017-12250, published 2017-09-21. Medium severity, CVSS 5.3. EPSS: 3.1% chance of exploitation in the next 30 days. A vulnerability in the HTTP web interface for Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause an HTTP Application Optimization (AO) related…
CVE-2014-3285, published 2014-05-29. Medium severity, CVSS 5.0. EPSS: 3% chance of exploitation in the next 30 days. Cisco Wide Area Application Services (WAAS) 5.3(.5a) and earlier, when SharePoint acceleration is enabled, does not properly parse SharePoint responses, which allows remote attackers to cause a…
CVE-2014-2196, published 2014-05-26. High severity, CVSS 9.3. EPSS: 2.4% chance of exploitation in the next 30 days. Cisco Wide Area Application Services (WAAS) 5.1.1 before 5.1.1e, when SharePoint prefetch optimization is enabled, allows remote SharePoint servers to execute arbitrary code via a malformed response,…
CVE-2018-0329, published 2018-06-07. Medium severity, CVSS 5.3. EPSS: 2.3% chance of exploitation in the next 30 days. A vulnerability in the default configuration of the Simple Network Management Protocol (SNMP) feature of Cisco Wide Area Application Services (WAAS) Software could allow an unauthenticated, remote…
CVE-2017-6727, published 2017-07-10. Medium severity, CVSS 5.3. EPSS: 2.2% chance of exploitation in the next 30 days. A vulnerability in the Server Message Block (SMB) protocol of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition…
CVE-2017-6721, published 2017-07-04. Medium severity, CVSS 5.3. EPSS: 2.2% chance of exploitation in the next 30 days. A vulnerability in the ingress processing of fragmented TCP packets by Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause the WAASNET process to…
CVE-2007-3923, published 2007-07-21. High severity, CVSS 7.8. EPSS: 2% chance of exploitation in the next 30 days. The Common Internet File System (CIFS) optimization in Cisco Wide Area Application Services (WAAS) 4.0.7 and 4.0.9, as used by Cisco WAE appliance and the NM-WAE-502 network module, when Edge…
CVE-2015-6421, published 2016-01-27. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. cifs-ao in the CIFS optimization functionality on Cisco Wide Area Application Service (WAAS) and Virtual WAAS (vWAAS) devices 5.x before 5.3.5d and 5.4 and 5.5 before 5.5.3 allows remote attackers to…

Latest

CVE-2021-1438, published 2021-05-06. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in Cisco Wide Area Application Services (WAAS) Software could allow an authenticated, local attacker to gain access to sensitive information on an affected device. The vulnerability…
CVE-2019-1876, published 2019-06-20. Medium severity, CVSS 5.3. EPSS: 1.8% chance of exploitation in the next 30 days. A vulnerability in the HTTPS proxy feature of Cisco Wide Area Application Services (WAAS) Software could allow an unauthenticated, remote attacker to use the Central Manager as an HTTPS proxy. The…
CVE-2018-0352, published 2018-06-07. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the Disk Check Tool (disk-check.sh) for Cisco Wide Area Application Services (WAAS) Software could allow an authenticated, local attacker to elevate their privilege level to root.…
CVE-2017-12267, published 2017-10-05. Medium severity, CVSS 5.3. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability in the Independent Computing Architecture (ICA) accelerator feature for the Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause an ICA…
CVE-2017-12256, published 2017-10-05. Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in the Akamai Connect feature of Cisco Wide Area Application Services (WAAS) Appliances could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) condition on…
CVE-2017-6730, published 2017-07-10. Medium severity, CVSS 5.3. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability in the web-based GUI of Cisco Wide Area Application Services (WAAS) Central Manager could allow an unauthenticated, remote attacker to retrieve completed reports from an affected…