Skip to content
OpenAdvisories
High · 8.6 CVE-2019-1817 EUVD-2019-10374GHSA-7577-f2mx-w9rc

Cisco Web Security Appliance Malformed Request Denial of Service Vulnerability

Published May 3, 2019 · Updated Nov 19, 2024 · Assigned by cisco

Description

A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliance could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper validation of HTTP and HTTPS requests. An attacker could exploit this vulnerability by sending a malformed HTTP or HTTPS request to an affected device. An exploit could allow the attacker to cause a restart of the web proxy process, resulting in a temporary DoS condition.

Affected products

VendorProductAffectedFixed
Cisco Cisco Web Security Appliance (WSA) unspecified – < 11.5.2-020, unspecified – < 11.7.0-406 11.5.2-020

References