CVE-2019-1884
Description
A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation mechanisms for certain fields in HTTP/HTTPS requests sent through an affected device. A successful attacker could exploit this vulnerability by sending a malicious HTTP/HTTPS request through an affected device. An exploit could allow the attacker to force the device to stop processing traffic, resulting in a DoS condition.
How to fix
- cisco asyncos10.5.5-005, 11.5.2-020, 11.7.0-407 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco asyncos | 10.1 ≤ v < 10.5.5-005, 11.5 ≤ v < 11.5.2-020, 11.7 ≤ v < 11.7.0-407 | 10.5.5-005, 11.5.2-020, 11.7.0-407 |
| cisco web_security_appliance | 10.1.4-017, 10.5.2-072, 11.5.1-fcs-125, 11.7.0-256 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.