A vulnerability in the Server Message Block (SMB) protocol of Cisconbsp;Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device due to a process restarting unexpectedly.

The vulnerability is due to incomplete input validation of an SMB Create Request packet.

An attacker could exploit this vulnerability by sending a specially crafted Create Request packet to an affected device.

An exploit could allow an attacker to cause a process to reload unexpectedly and cause a DoS condition.

There are no workarounds that address this vulnerability.

This advisory is available at the following link:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-waas
A vulnerability in the Server Message Block (SMB) protocol of Cisconbsp;Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device due to a process restarting unexpectedly.

The vulnerability is due to incomplete input validation of an SMB Create Request packet.

An attacker could exploit this vulnerability by sending a specially crafted Create Request packet to an affected device.

An exploit could allow an attacker to cause a process to reload unexpectedly and cause a DoS condition.

There are no workarounds that address this vulnerability.

This advisory is available at the following link:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-waas

Security Impact Rating: Medium

CVE: CVE-2017-6727

Leave a Reply