← Vulnerability feed

Vulnerability record · CVE-2015-6421 · published 27 January 2016

CVE-2015-6421: Cisco wide area application services vulnerability

Cisco · Wide Area Application Services

cifs-ao in the CIFS optimization functionality on Cisco Wide Area Application Service (WAAS) and Virtual WAAS (vWAAS) devices 5.x before 5.3.5d and 5.4 and 5.5 before 5.5.3 allows remote attackers to cause a denial of service (resource consumption and device reload) via crafted network traffic, aka Bug ID CSCus85330.

7.5 CVSS 3.0 High EPSS 1.9% · top 20.8% CWE-399 · CWE-399
7.5CVSS 3.0 base score, v2 7.8
1.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

cifs-ao in the CIFS optimization functionality on Cisco Wide Area Application Service (WAAS) and Virtual WAAS (vWAAS) devices 5.x before 5.3.5d and 5.4 and 5.5 before 5.5.3 allows remote attackers to cause a denial of service (resource consumption and device reload) via crafted network traffic, aka Bug ID CSCus85330.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-waascifs Vendor Advisory
http://www.securitytracker.com/id/1034831
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-waascifs Vendor Advisory
http://www.securitytracker.com/id/1034831

Track CVE-2015-6421 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2013-3443Cisco wide area application services improper input validation vulnerabilityThe web service framework in Cisco WAAS Software 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1 in a Central Manager (CM) con…EPSS 6.0%9.3CVE-2014-2196Cisco wide area application services code injection vulnerabilityCisco Wide Area Application Services (WAAS) 5.1.1 before 5.1.1e, when SharePoint prefetch optimization is enabled, allows remote SharePoint servers t…EPSS 2.4%9.0CVE-2013-3444Cisco wide area application services os command injection vulnerabilityThe web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5…EPSS 4.2%7.8CVE-2007-3923Cisco wide area application services vulnerabilityThe Common Internet File System (CIFS) optimization in Cisco Wide Area Application Services (WAAS) 4.0.7 and 4.0.9, as used by Cisco WAE appliance an…EPSS 2.0%6.8CVE-2017-6628Cisco wide area application services vulnerabilityA vulnerability in SMART-SSL Accelerator functionality for Cisco Wide Area Application Services (WAAS) 6.2.1, 6.2.1a, and 6.2.3a could allow an unaut…EPSS 1.7%6.7CVE-2018-0352Cisco wide area application services permissions and access controls vulnerabilityA vulnerability in the Disk Check Tool (disk-check.sh) for Cisco Wide Area Application Services (WAAS) Software could allow an authenticated, local a…EPSS 0.39%6.5CVE-2017-12256Cisco wide area application services vulnerabilityA vulnerability in the Akamai Connect feature of Cisco Wide Area Application Services (WAAS) Appliances could allow an unauthenticated, remote attack…EPSS 1.4%5.9CVE-2016-6437Cisco wide area application services vulnerabilityA vulnerability in the SSL session cache management of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to…EPSS 1.7%

Source: NIST National Vulnerability Database (record CVE-2015-6421), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.