Denial-of-Service Vulnerability in Cisco WAAS Appliances

CVE-2017-12256

What is CVE-2017-12256?

A vulnerability in the Akamai Connect feature of Cisco Wide Area Application Services (WAAS) Appliances enables a remote attacker to trigger a denial-of-service (DoS) condition. The issue arises from specific inefficiencies in file handling within the system. By directing client systems to a corrupted file that cannot be correctly decompressed, an attacker could exploit this vulnerability, leading to device crashes or hangs. This condition may necessitate manual intervention to restore normal operations. For further details, see Cisco's security advisory.

References