CVE-2013-5537

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-10-24 · updated 2026-06-16
Weakness: CWE-20

Description

The web framework on Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA) devices does not properly manage the state of HTTP and HTTPS sessions, which allows remote attackers to cause a denial of service (management GUI outage) via multiple TCP connections, aka Bug IDs CSCuj59411, CSCuf89818, and CSCuh05635.

Affected products

Cisco Content Security Management Appliance (SMA): all versions
Cisco Email Security Appliance: all versions
Cisco Web Security Appliance (WSA): all versions

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5537
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5537

Get alerted when CVE-2013-5537 or the next vulnerability affects your stack