Information disclosure in Cisco Content_security_management_appliance
CVE-2017-6783
A vulnerability in SNMP polling for the Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA) could allow an authenticated, remote attacker to discover confidential information…
Vulnerability class: Information Disclosure
EPSS: 0.003 (51.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.
Affected products
- Cisco Content_security_management_appliance — versions 10.1.0-037
- Cisco Email_security_appliance — versions 9.7.2-065
- Cisco Web_security_appliance — versions 10.0.0-230
- Cisco Systems, Inc. Content Security Management Appliance (Sma) — versions 10.1.0-037
- Cisco Systems, Inc. Email Security Appliance (Esa) — versions 9.7.2-065
- Cisco Systems, Inc. Web Security Appliance (Wsa) — versions 10.0.0-230
Weakness classification (CWE)
References
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
Frequently asked questions
- What is CVE-2017-6783?
- CVE-2017-6783 is a medium-severity vulnerability in Cisco Content_security_management_appliance, classified under Information Disclosure. CVSS score: 4.3/10. Published 2017-08-17.
- How severe is CVE-2017-6783?
- Medium severity. CVSS v3 base score is 4.3 out of 10.