Test ID:	1.3.6.1.4.1.25623.1.0.105341
Category:	CISCO
Title:	Cisco AsyncOS for Web Security Appliance Denial of Service Vulnerability
Summary:	Cisco AsyncOS for Web Security Appliance is prone to a denial of service (DoS) vulnerability.
Description:	Summary: Cisco AsyncOS for Web Security Appliance is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The vulnerability is due to improper handling of packets sent at high rate to an affected system that is configured for clustering. An unauthenticated, remote attacker could exploit this vulnerability by sending packets to the target system at a high rate. An exploit could allow the attacker to cause the affected system to become unresponsive on the clustering and SSH configured ports, resulting in a DoS condition. Vulnerability Impact: An attacker can exploit this issue to cause an affected device to become unresponsive, resulting in a denial-of-service condition. Affected Software/OS: This issue is tracked by Cisco Bug IDs CSCur13704, CSCuq05636, CSCuv43307, and CSCuv99383. Solution: Updates are available. Please see the vendor advisory for more information. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-4236 BugTraq ID: 75703 http://www.securityfocus.com/bid/75703 Cisco Security Advisory: 20150710 Cisco AsyncOS for Cisco Email Security Appliance Cluster Denial of Service Vulnerability http://tools.cisco.com/security/center/viewAlert.x?alertId=39785 http://www.securitytracker.com/id/1032855
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.