← Vulnerability feed

Vulnerability record · CVE-2007-3923 · published 21 July 2007

CVE-2007-3923: Cisco wide area application services vulnerability

Cisco · Wide Area Application Services

The Common Internet File System (CIFS) optimization in Cisco Wide Area Application Services (WAAS) 4.0.7 and 4.0.9, as used by Cisco WAE appliance and the NM-WAE-502 network module, when Edge Services are configured, allows remote attackers to cause a denial of service (loss of service) via a flood of TCP SYN packets to port (1) 139 or (2) 445.

7.8 CVSS 2.0 High EPSS 2.0% · top 20.3%
7.8CVSS 2.0 base score
2.0%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
14References
16 Jun 2026Last modified by NVD

Description

The Common Internet File System (CIFS) optimization in Cisco Wide Area Application Services (WAAS) 4.0.7 and 4.0.9, as used by Cisco WAE appliance and the NM-WAE-502 network module, when Edge Services are configured, allows remote attackers to cause a denial of service (loss of service) via a flood of TCP SYN packets to port (1) 139 or (2) 445.

AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/26122 PatchVendor Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20070718-waas.shtml Patch
http://www.osvdb.org/36120
http://www.securityfocus.com/bid/24956 Patch
http://www.securitytracker.com/id?1018416 Patch
http://www.vupen.com/english/advisories/2007/2572
https://exchange.xforce.ibmcloud.com/vulnerabilities/35477
http://secunia.com/advisories/26122 PatchVendor Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20070718-waas.shtml Patch
http://www.osvdb.org/36120
http://www.securityfocus.com/bid/24956 Patch
http://www.securitytracker.com/id?1018416 Patch
http://www.vupen.com/english/advisories/2007/2572
https://exchange.xforce.ibmcloud.com/vulnerabilities/35477

Track CVE-2007-3923 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2013-3443Cisco wide area application services improper input validation vulnerabilityThe web service framework in Cisco WAAS Software 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1 in a Central Manager (CM) con…EPSS 6.0%9.3CVE-2014-2196Cisco wide area application services code injection vulnerabilityCisco Wide Area Application Services (WAAS) 5.1.1 before 5.1.1e, when SharePoint prefetch optimization is enabled, allows remote SharePoint servers t…EPSS 2.4%9.0CVE-2013-3444Cisco wide area application services os command injection vulnerabilityThe web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5…EPSS 4.2%7.5CVE-2015-6421Cisco wide area application services vulnerabilitycifs-ao in the CIFS optimization functionality on Cisco Wide Area Application Service (WAAS) and Virtual WAAS (vWAAS) devices 5.x before 5.3.5d and 5…EPSS 1.9%6.8CVE-2017-6628Cisco wide area application services vulnerabilityA vulnerability in SMART-SSL Accelerator functionality for Cisco Wide Area Application Services (WAAS) 6.2.1, 6.2.1a, and 6.2.3a could allow an unaut…EPSS 1.7%6.7CVE-2018-0352Cisco wide area application services permissions and access controls vulnerabilityA vulnerability in the Disk Check Tool (disk-check.sh) for Cisco Wide Area Application Services (WAAS) Software could allow an authenticated, local a…EPSS 0.39%6.5CVE-2017-12256Cisco wide area application services vulnerabilityA vulnerability in the Akamai Connect feature of Cisco Wide Area Application Services (WAAS) Appliances could allow an unauthenticated, remote attack…EPSS 1.4%5.9CVE-2016-6437Cisco wide area application services vulnerabilityA vulnerability in the SSL session cache management of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to…EPSS 1.7%

Source: NIST National Vulnerability Database (record CVE-2007-3923), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.