Unscored severity · published May 29, 2014
CVE-2014-3285
Cisco Wide Area Application Services (WAAS) 5.3(.5a) and earlier, when SharePoint acceleration is enabled, does not properly parse SharePoint responses, which allows remote…
–
CVSS
3%
EPSS
No
On KEV
Description
Cisco Wide Area Application Services (WAAS) 5.3(.5a) and earlier, when SharePoint acceleration is enabled, does not properly parse SharePoint responses, which allows remote attackers to cause a denial of service (application-optimization handler reload) via a crafted SharePoint application, aka Bug ID CSCue47674.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.0% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WA
Wide Area Application Services · Cisco
through 5.3\(.5a\); 5.1; 5.1(.1); 5.1(.1a); 5.1(.1b); 5.1(.1c); +9 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-3285
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-3285
Permissions Required
http://secunia.com/advisories/58806
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3285
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34395
Third Party Advisory
http://www.securityfocus.com/bid/67696
Third Party Advisory
http://www.securitytracker.com/id/1030307
More from Wide Area Application Services
7.5
CVE-2015-6421
cifs-ao in the CIFS optimization functionality on Cisco Wide Area Application Service (WAAS) and Virtual WAAS (vWAAS) devices 5.x before 5.3.5d and 5.4 and 5.5 before 5.5.3 allows…
6.8
CVE-2017-6628
A vulnerability in SMART-SSL Accelerator functionality for Cisco Wide Area Application Services (WAAS) 6.2.1, 6.2.1a, and 6.2.3a could allow an unauthenticated, remote attacker to…
6.7
CVE-2018-0352
A vulnerability in the Disk Check Tool (disk-check.sh) for Cisco Wide Area Application Services (WAAS) Software could allow an authenticated, local attacker to elevate their…
6.5
CVE-2017-12256
A vulnerability in the Akamai Connect feature of Cisco Wide Area Application Services (WAAS) Appliances could allow an unauthenticated, remote attacker to cause a…
5.9
CVE-2016-6437
A vulnerability in the SSL session cache management of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause a denial of service…