RCE in Cisco Wide_area_application_services

CVE-2014-2196

Cisco Wide Area Application Services (WAAS) 5.1.1 before 5.1.1e, when SharePoint prefetch optimization is enabled, allows remote SharePoint servers to execute arbitrary code via a malformed response, aka Bug ID CSCue18479.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.024 (82.5th percentile) — read the EPSS interpretation.

Affected products

Cisco Wide_area_application_services — versions 5.1.1
N/a — versions n/a

Weakness classification (CWE)

CWE-94 — Code Injection

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)