Read the docs
TI-2015-05308 Aliases CVE-2015-6321GHSA-rmcx-cqh3-x8cj

Cisco AsyncOS before 8.5.7-042, 9.x before 9.1.0-032, 9.1.x before 9.1.1-023, and 9.5.x…

Priority LOW 39CWE-399Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-399 and the CVSS impact.

Summary

Cisco AsyncOS before 8.5.7-042, 9.x before 9.1.0-032, 9.1.x before 9.1.1-023, and 9.5.x and 9.6.x before 9.6.0-042 on Email Security Appliance (ESA) devices; before 9.1.0-032, 9.1.1 before 9.1.1-005, and 9.5.x before 9.5.0-025 on Content Security Management Appliance (SMA) devices; and before 7.7.0-725 and 8.x before 8.0.8-113 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (memory consumption) via a flood of TCP packets, aka Bug IDs CSCus79774, CSCus79777, and CSCzv95795.

Why it matters now

EPSS 0.02764 86th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 40

CPEVersionsRoleVendor
cpe:2.3:a:cisco:web_security_appliance:5.6.0-623:*:*:*:*:*:*:*5.6.0-623VulnerableCisco
cpe:2.3:a:cisco:web_security_appliance:6.0.0-000:*:*:*:*:*:*:*6.0.0-000VulnerableCisco
cpe:2.3:a:cisco:web_security_appliance:7.5.0-000:*:*:*:*:*:*:*7.5.0-000VulnerableCisco
cpe:2.3:a:cisco:web_security_appliance:7.5.0-825:*:*:*:*:*:*:*7.5.0-825VulnerableCisco
cpe:2.3:a:cisco:web_security_appliance:7.5.1-000:*:*:*:*:*:*:*7.5.1-000VulnerableCisco
cpe:2.3:a:cisco:web_security_appliance:7.5.2-000:*:*:*:*:*:*:*7.5.2-000VulnerableCisco
cpe:2.3:a:cisco:web_security_appliance:7.7.0-000:*:*:*:*:*:*:*7.7.0-000VulnerableCisco
cpe:2.3:a:cisco:web_security_appliance:7.7.1-000:*:*:*:*:*:*:*7.7.1-000VulnerableCisco
cpe:2.3:a:cisco:web_security_appliance:8.0.0-000:*:*:*:*:*:*:*8.0.0-000VulnerableCisco
cpe:2.3:a:cisco:web_security_appliance:8.5.0.000:*:*:*:*:*:*:*8.5.0.000VulnerableCisco
  • cpe:2.3:a:cisco:web_security_appliance:5.6.0-623:*:*:*:*:*:*:* Versions 5.6.0-623 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:web_security_appliance:6.0.0-000:*:*:*:*:*:*:* Versions 6.0.0-000 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:web_security_appliance:7.5.0-000:*:*:*:*:*:*:* Versions 7.5.0-000 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:web_security_appliance:7.5.0-825:*:*:*:*:*:*:* Versions 7.5.0-825 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:web_security_appliance:7.5.1-000:*:*:*:*:*:*:* Versions 7.5.1-000 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:web_security_appliance:7.5.2-000:*:*:*:*:*:*:* Versions 7.5.2-000 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:web_security_appliance:7.7.0-000:*:*:*:*:*:*:* Versions 7.7.0-000 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:web_security_appliance:7.7.1-000:*:*:*:*:*:*:* Versions 7.7.1-000 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:web_security_appliance:8.0.0-000:*:*:*:*:*:*:* Versions 8.0.0-000 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:web_security_appliance:8.5.0.000:*:*:*:*:*:*:* Versions 8.5.0.000 Vulnerable ·Cisco
Show 30 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:cisco:content_security_management_appliance:7.8.0-328:*:*:*:*:*:*:*7.8.0-328VulnerableCisco
cpe:2.3:a:cisco:content_security_management_appliance:7.8.1-001:*:*:*:*:*:*:*7.8.1-001VulnerableCisco
cpe:2.3:a:cisco:content_security_management_appliance:7.9.0-201:*:*:*:*:*:*:*7.9.0-201VulnerableCisco
cpe:2.3:a:cisco:content_security_management_appliance:7.9.2-116:*:*:*:*:*:*:*7.9.2-116VulnerableCisco
cpe:2.3:a:cisco:content_security_management_appliance:8.0.1-031:*:*:*:*:*:*:*8.0.1-031VulnerableCisco
cpe:2.3:a:cisco:content_security_management_appliance:8.1.0-001:*:*:*:*:*:*:*8.1.0-001VulnerableCisco
cpe:2.3:a:cisco:content_security_management_appliance:8.1.1-033:*:*:*:*:*:*:*8.1.1-033VulnerableCisco
cpe:2.3:a:cisco:content_security_management_appliance:8.1.2-000:*:*:*:*:*:*:*8.1.2-000VulnerableCisco
cpe:2.3:a:cisco:content_security_management_appliance:8.2.0-238:*:*:*:*:*:*:*8.2.0-238VulnerableCisco
cpe:2.3:a:cisco:content_security_management_appliance:8.3.0-350:*:*:*:*:*:*:*8.3.0-350VulnerableCisco
cpe:2.3:a:cisco:content_security_management_appliance:8.3.5-061:*:*:*:*:*:*:*8.3.5-061VulnerableCisco
cpe:2.3:a:cisco:content_security_management_appliance:8.3.6-014:*:*:*:*:*:*:*8.3.6-014VulnerableCisco
cpe:2.3:a:cisco:content_security_management_appliance:8.3.7-010:*:*:*:*:*:*:*8.3.7-010VulnerableCisco
cpe:2.3:a:cisco:content_security_management_appliance:8.4.0-150:*:*:*:*:*:*:*8.4.0-150VulnerableCisco
cpe:2.3:a:cisco:content_security_management_appliance:9.0.0-073:*:*:*:*:*:*:*9.0.0-073VulnerableCisco
cpe:2.3:a:cisco:content_security_management_appliance:9.1.0-004:*:*:*:*:*:*:*9.1.0-004VulnerableCisco
cpe:2.3:a:cisco:email_security_appliance:7.6.1-000:*:*:*:*:*:*:*7.6.1-000VulnerableCisco
cpe:2.3:a:cisco:email_security_appliance:7.6.3-000:*:*:*:*:*:*:*7.6.3-000VulnerableCisco
cpe:2.3:a:cisco:email_security_appliance:7.7.0-000:*:*:*:*:*:*:*7.7.0-000VulnerableCisco
cpe:2.3:a:cisco:email_security_appliance:7.7.1-000:*:*:*:*:*:*:*7.7.1-000VulnerableCisco
cpe:2.3:a:cisco:email_security_appliance:7.8.0-311:*:*:*:*:*:*:*7.8.0-311VulnerableCisco
cpe:2.3:a:cisco:email_security_appliance:8.5.6-052:*:*:*:*:*:*:*8.5.6-052VulnerableCisco
cpe:2.3:a:cisco:email_security_appliance:8.6.0-011:*:*:*:*:*:*:*8.6.0-011VulnerableCisco
cpe:2.3:a:cisco:email_security_appliance:8.9.1-000:*:*:*:*:*:*:*8.9.1-000VulnerableCisco
cpe:2.3:a:cisco:email_security_appliance:8.9.2-032:*:*:*:*:*:*:*8.9.2-032VulnerableCisco
cpe:2.3:a:cisco:email_security_appliance:9.0.0-212:*:*:*:*:*:*:*9.0.0-212VulnerableCisco
cpe:2.3:a:cisco:email_security_appliance:9.0.5-000:*:*:*:*:*:*:*9.0.5-000VulnerableCisco
cpe:2.3:a:cisco:email_security_appliance:9.1.0-011:*:*:*:*:*:*:*9.1.0-011VulnerableCisco
cpe:2.3:a:cisco:email_security_appliance:9.4.4-000:*:*:*:*:*:*:*9.4.4-000VulnerableCisco
cpe:2.3:a:cisco:email_security_appliance:9.5.0-000:*:*:*:*:*:*:*9.5.0-000VulnerableCisco
  • cpe:2.3:a:cisco:content_security_management_appliance:7.8.0-328:*:*:*:*:*:*:* Versions 7.8.0-328 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:content_security_management_appliance:7.8.1-001:*:*:*:*:*:*:* Versions 7.8.1-001 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:content_security_management_appliance:7.9.0-201:*:*:*:*:*:*:* Versions 7.9.0-201 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:content_security_management_appliance:7.9.2-116:*:*:*:*:*:*:* Versions 7.9.2-116 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:content_security_management_appliance:8.0.1-031:*:*:*:*:*:*:* Versions 8.0.1-031 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:content_security_management_appliance:8.1.0-001:*:*:*:*:*:*:* Versions 8.1.0-001 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:content_security_management_appliance:8.1.1-033:*:*:*:*:*:*:* Versions 8.1.1-033 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:content_security_management_appliance:8.1.2-000:*:*:*:*:*:*:* Versions 8.1.2-000 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:content_security_management_appliance:8.2.0-238:*:*:*:*:*:*:* Versions 8.2.0-238 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:content_security_management_appliance:8.3.0-350:*:*:*:*:*:*:* Versions 8.3.0-350 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:content_security_management_appliance:8.3.5-061:*:*:*:*:*:*:* Versions 8.3.5-061 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:content_security_management_appliance:8.3.6-014:*:*:*:*:*:*:* Versions 8.3.6-014 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:content_security_management_appliance:8.3.7-010:*:*:*:*:*:*:* Versions 8.3.7-010 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:content_security_management_appliance:8.4.0-150:*:*:*:*:*:*:* Versions 8.4.0-150 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:content_security_management_appliance:9.0.0-073:*:*:*:*:*:*:* Versions 9.0.0-073 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:content_security_management_appliance:9.1.0-004:*:*:*:*:*:*:* Versions 9.1.0-004 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:email_security_appliance:7.6.1-000:*:*:*:*:*:*:* Versions 7.6.1-000 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:email_security_appliance:7.6.3-000:*:*:*:*:*:*:* Versions 7.6.3-000 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:email_security_appliance:7.7.0-000:*:*:*:*:*:*:* Versions 7.7.0-000 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:email_security_appliance:7.7.1-000:*:*:*:*:*:*:* Versions 7.7.1-000 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:email_security_appliance:7.8.0-311:*:*:*:*:*:*:* Versions 7.8.0-311 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:email_security_appliance:8.5.6-052:*:*:*:*:*:*:* Versions 8.5.6-052 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:email_security_appliance:8.6.0-011:*:*:*:*:*:*:* Versions 8.6.0-011 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:email_security_appliance:8.9.1-000:*:*:*:*:*:*:* Versions 8.9.1-000 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:email_security_appliance:8.9.2-032:*:*:*:*:*:*:* Versions 8.9.2-032 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:email_security_appliance:9.0.0-212:*:*:*:*:*:*:* Versions 9.0.0-212 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:email_security_appliance:9.0.5-000:*:*:*:*:*:*:* Versions 9.0.5-000 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:email_security_appliance:9.1.0-011:*:*:*:*:*:*:* Versions 9.1.0-011 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:email_security_appliance:9.4.4-000:*:*:*:*:*:*:* Versions 9.4.4-000 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:email_security_appliance:9.5.0-000:*:*:*:*:*:*:* Versions 9.5.0-000 Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2015-6321
  2. 2026-10-03 Alias added: GHSA-rmcx-cqh3-x8cj

References

Advisory 1

  • TI-2016-01993 The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other… CVSS 3.1HIGH 7.5
  • TI-2014-01669 The End User Safelist/Blocklist (aka SLBL) service in Cisco AsyncOS Software for Email… CVSS 2.0HIGH 8.5
  • TI-2013-04730 The web framework on Cisco Web Security Appliance (WSA), Email Security Appliance (ESA)… CVSS 2.0HIGH 7.8
  • TI-2019-01602 Cisco Email Security Appliance and Cisco Content Security Management Appliance Denial of Service Vulnerability CVSS 3.1MEDIUM 5.3
  • TI-2020-02726 Cisco ESA, Cisco WSA, and Cisco SMA GUI Denial of Service Vulnerability CVSS 3.1MEDIUM 5.3
  • TI-2021-00856 Cisco Email Security Appliance, Cisco Content Security Management Appliance, and Cisco… CVSS 3.1MEDIUM 5.3
See all 26 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences