CVE-2013-5537

The web framework on Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA) devices does not properly manage the state of HTTP and HTTPS sessions, which allows remote attackers to cause a denial of service (management GUI outage) via multiple TCP connections, aka Bug IDs CSCuj59411, CSCuf89818, and CSCuh05635.

CVSS v2.0 7.8 HIGH

7.8^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5537	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:h:cisco:web_security_appliance:-:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:h:cisco:content_security_management_appliance:-:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:o:cisco:email_security_appliance_firmware:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2013-10-24 10:53

Updated : 2024-02-04 18:16

NVD link : CVE-2013-5537

Mitre link : CVE-2013-5537

CVE.ORG link : CVE-2013-5537

JSON object : View

Products Affected

cisco

email_security_appliance_firmware
web_security_appliance
content_security_management_appliance

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2013-5537", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-10-24T10:53:09.897", "references": [{"url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5537", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "The web framework on Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA) devices does not properly manage the state of HTTP and HTTPS sessions, which allows remote attackers to cause a denial of service (management GUI outage) via multiple TCP connections, aka Bug IDs CSCuj59411, CSCuf89818, and CSCuh05635."}, {"lang": "es", "value": "El framework web en dispositivos Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), y Content Security Management Appliance (SMA) no manejan correctamente el estado de sesiones HTTP y HTTPS, lo cual permite a atacantes remotos causar denegaci\u00f3n de servicio (agotamiento de GUI de gesti\u00f3n) a trav\u00e9s de m\u00faltiples conexiones TCP, tambi\u00e9n conocido como bug IDs CSCuj59411, CSCuf89818, y CSCuh05635."}], "lastModified": "2018-10-30T16:27:22.513", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:web_security_appliance:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8F24CCD0-DFAB-44D9-B29A-A6D925A83C93"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:content_security_management_appliance:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "60635EC8-9AFA-400D-A919-66E60CDEF852"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:email_security_appliance_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5BA3A518-E103-4D98-A040-88ED4E0D73CC"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}