Test ID:	1.3.6.1.4.1.25623.1.0.105341
Category:	CISCO
Title:	Cisco AsyncOS for Web Security Appliance Denial of Service Vulnerability
Summary:	Cisco AsyncOS for Web Security Appliance is prone to a denial-of-service vulnerability.
Description:	Summary: Cisco AsyncOS for Web Security Appliance is prone to a denial-of-service vulnerability. Vulnerability Insight: The vulnerability is due to improper handling of packets sent at high rate to an affected system that is configured for clustering. An unauthenticated, remote attacker could exploit this vulnerability by sending packets to the target system at a high rate. An exploit could allow the attacker to cause the affected system to become unresponsive on the clustering and SSH configured ports, resulting in a DoS condition. Vulnerability Impact: An attacker can exploit this issue to cause an affected device to become unresponsive, resulting in a denial-of-service condition. Affected Software/OS: This issue is tracked by Cisco Bug IDs CSCur13704, CSCuq05636, CSCuv43307, and CSCuv99383 . Solution: Updates are available. Please see the vendor advisory for more information. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	BugTraq ID: 75703 Common Vulnerability Exposure (CVE) ID: CVE-2015-4236 http://www.securityfocus.com/bid/75703 Cisco Security Advisory: 20150710 Cisco AsyncOS for Cisco Email Security Appliance Cluster Denial of Service Vulnerability http://tools.cisco.com/security/center/viewAlert.x?alertId=39785 http://www.securitytracker.com/id/1032855
Copyright	This script is Copyright (C) 2015 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.