Vulnerability record · CVE-2013-3443 · published 1 August 2013

CVE-2013-3443: Cisco wide area application services improper input validation vulnerability

Cisco · Wide Area Application Services

The web service framework in Cisco WAAS Software 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1 in a Central Manager (CM) configuration allows remote attackers to execute arbitrary code via a crafted POST request, aka Bug ID CSCuh26626.

10.0 CVSS 2.0 High EPSS 6.0% · top 6.9% CWE-20 · Improper input validation

10.0CVSS 2.0 base score

6.0%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

14References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Wide Area Application Services Cisco

References

Link	Tags
http://osvdb.org/95877
http://secunia.com/advisories/54367
http://secunia.com/advisories/54372
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130731-waascm	Vendor Advisory
http://www.securityfocus.com/bid/61542
http://www.securitytracker.com/id/1028851
https://exchange.xforce.ibmcloud.com/vulnerabilities/86121
http://osvdb.org/95877
http://secunia.com/advisories/54367
http://secunia.com/advisories/54372
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130731-waascm	Vendor Advisory
http://www.securityfocus.com/bid/61542
http://www.securitytracker.com/id/1028851
https://exchange.xforce.ibmcloud.com/vulnerabilities/86121

Track CVE-2013-3443 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2014-2196Cisco wide area application services code injection vulnerabilityCisco Wide Area Application Services (WAAS) 5.1.1 before 5.1.1e, when SharePoint prefetch optimization is enabled, allows remote SharePoint servers t…EPSS 2.4%26 May 2014 9.0CVE-2013-3444Cisco wide area application services os command injection vulnerabilityThe web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5…EPSS 4.2%1 Aug 2013 7.8CVE-2007-3923Cisco wide area application services vulnerabilityThe Common Internet File System (CIFS) optimization in Cisco Wide Area Application Services (WAAS) 4.0.7 and 4.0.9, as used by Cisco WAE appliance an…EPSS 2.0%21 Jul 2007 7.5CVE-2015-6421Cisco wide area application services vulnerabilitycifs-ao in the CIFS optimization functionality on Cisco Wide Area Application Service (WAAS) and Virtual WAAS (vWAAS) devices 5.x before 5.3.5d and 5…EPSS 1.9%27 Jan 2016 6.8CVE-2017-6628Cisco wide area application services vulnerabilityA vulnerability in SMART-SSL Accelerator functionality for Cisco Wide Area Application Services (WAAS) 6.2.1, 6.2.1a, and 6.2.3a could allow an unaut…EPSS 1.7%3 May 2017 6.7CVE-2018-0352Cisco wide area application services permissions and access controls vulnerabilityA vulnerability in the Disk Check Tool (disk-check.sh) for Cisco Wide Area Application Services (WAAS) Software could allow an authenticated, local a…EPSS 0.39%7 Jun 2018 6.5CVE-2017-12256Cisco wide area application services vulnerabilityA vulnerability in the Akamai Connect feature of Cisco Wide Area Application Services (WAAS) Appliances could allow an unauthenticated, remote attack…EPSS 1.4%5 Oct 2017 5.9CVE-2016-6437Cisco wide area application services vulnerabilityA vulnerability in the SSL session cache management of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to…EPSS 1.7%27 Oct 2016

Source: NIST National Vulnerability Database (record CVE-2013-3443), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.