CVE-2016-6437

Severity: medium (CVSS 5.9 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-10-27 · updated 2026-06-17
Weakness: CWE-399

Description

A vulnerability in the SSL session cache management of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high consumption of disk space. The user would see a performance degradation. More Information: CSCva03095. Known Affected Releases: 5.3(5), 6.1(1), 6.2(1). Known Fixed Releases: 5.3(5g)1, 6.2(2.32).

Affected products

Cisco Wide Area Application Services: 5.3.1, 5.3.3, 5.3.5, 5.3.5a, 5.3.5b, 5.3.5c (+7)

References

http://www.securityfocus.com/bid/93524
http://www.securitytracker.com/id/1037002
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161012-waas
http://www.securityfocus.com/bid/93524
http://www.securitytracker.com/id/1037002
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161012-waas

Get alerted when CVE-2016-6437 or the next vulnerability affects your stack