Description
The HTTPS Proxy feature in Cisco AsyncOS before 8.5.3-051 and 9.x before 9.0.0-485 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (service outage) by leveraging certain intranet connectivity and sending a malformed HTTPS request, aka Bug ID CSCuu24840.
References
- 1035163 vdb-entry
- 20160302 Cisco Web Security Appliance HTTPS Packet Processing Denial of Service Vulnerability vendor-advisory