CVE-2017-12256: cisco wide_area_application_services Resource Management Errors
Vulnerability summary
CVE-2017-12256 is a high (CVSS 7.1) Resource Management Errors vulnerability in cisco wide_area_application_services. EPSS estimates a 1.42% chance of exploitation in the next 30 days, higher than 72.6% of scored vulnerabilities.
Timeline
- 05-10-2017PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
A vulnerability in the Akamai Connect feature of Cisco Wide Area Application Services (WAAS) Appliances could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) condition on an affected device. The vulnerability is due to certain file-handling inefficiencies of the affected system. An attacker could exploit this vulnerability by directing client systems to access a corrupted file that the client systems cannot decompress correctly. A successful exploit could allow the attacker to cause the affected device to crash or hang unexpectedly and result in a DoS condition that may require manual intervention to regain normal operating conditions. Cisco Bug IDs: CSCve82472.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.42%
Chance of exploitation in the next 30 days
Percentile
73%
Versus all other CVEs
30-day change
-0.07 pp
From 1.49% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Cisco1 product
1 vendor · 1 product
References
2 links- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-waasX Refsource CONFIRMVendor Advisory