Unscored severity · published Jul 21, 2007
CVE-2007-3923
The Common Internet File System (CIFS) optimization in Cisco Wide Area Application Services (WAAS) 4.0.7 and 4.0.9, as used by Cisco WAE appliance and the NM-WAE-502 network…
–
CVSS
2%
EPSS
No
On KEV
Description
The Common Internet File System (CIFS) optimization in Cisco Wide Area Application Services (WAAS) 4.0.7 and 4.0.9, as used by Cisco WAE appliance and the NM-WAE-502 network module, when Edge Services are configured, allows remote attackers to cause a denial of service (loss of service) via a flood of TCP SYN packets to port (1) 139 or (2) 445.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WA
Wide Area Application Services · Cisco
4.0.7; 4.0.9 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3923
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3923
Patch
http://secunia.com/advisories/26122
Patch
http://www.cisco.com/warp/public/707/cisco-sa-20070718-waas.shtml
www.osvdb.org
http://www.osvdb.org/36120
Patch
http://www.securityfocus.com/bid/24956
Patch
http://www.securitytracker.com/id?1018416
www.vupen.com
http://www.vupen.com/english/advisories/2007/2572
More from Wide Area Application Services
7.5
CVE-2015-6421
cifs-ao in the CIFS optimization functionality on Cisco Wide Area Application Service (WAAS) and Virtual WAAS (vWAAS) devices 5.x before 5.3.5d and 5.4 and 5.5 before 5.5.3 allows…
6.8
CVE-2017-6628
A vulnerability in SMART-SSL Accelerator functionality for Cisco Wide Area Application Services (WAAS) 6.2.1, 6.2.1a, and 6.2.3a could allow an unauthenticated, remote attacker to…
6.7
CVE-2018-0352
A vulnerability in the Disk Check Tool (disk-check.sh) for Cisco Wide Area Application Services (WAAS) Software could allow an authenticated, local attacker to elevate their…
6.5
CVE-2017-12256
A vulnerability in the Akamai Connect feature of Cisco Wide Area Application Services (WAAS) Appliances could allow an unauthenticated, remote attacker to cause a…
5.9
CVE-2016-6437
A vulnerability in the SSL session cache management of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause a denial of service…