Denial of Service Vulnerability in Cisco Web Security and Email Security Appliances

CVE-2013-3385

Summary

The management GUI in Cisco's IronPort AsyncOS for Web Security, Email Security, and Content Security Management Appliances contains vulnerabilities that allow remote attackers to exploit the management interface through a series of crafted HTTP or HTTPS requests. This may result in a denial of service, causing the system to hang and rendering it temporarily unavailable. Affected versions include specific releases across various appliances, urging users to check for patches to mitigate the impact of these vulnerabilities.

References