CVE-2014-3285

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-05-29 · updated 2026-06-17
Weakness: CWE-20

Description

Cisco Wide Area Application Services (WAAS) 5.3(.5a) and earlier, when SharePoint acceleration is enabled, does not properly parse SharePoint responses, which allows remote attackers to cause a denial of service (application-optimization handler reload) via a crafted SharePoint application, aka Bug ID CSCue47674.

Affected products

Cisco Wide Area Application Services: through 5.3\(.5a\); 5.1, 5.1(.1), 5.1(.1a), 5.1(.1b), 5.1(.1c), 5.1(.1d) (+8)

References

http://secunia.com/advisories/58806
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3285
http://tools.cisco.com/security/center/viewAlert.x?alertId=34395
http://www.securityfocus.com/bid/67696
http://www.securitytracker.com/id/1030307
http://secunia.com/advisories/58806
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3285
http://tools.cisco.com/security/center/viewAlert.x?alertId=34395
http://www.securityfocus.com/bid/67696
http://www.securitytracker.com/id/1030307

Get alerted when CVE-2014-3285 or the next vulnerability affects your stack