CVE-2015-6386

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance (WSA) versions 8.0.7-142 and 8.5.1-021

Description The issue allows remote attackers to cause a denial of service (CPU consumption) via FTP sessions in which the control connection is ended after data transfer.

Recommendations For version 8.0.7-142, update to a version that fixes this issue. For version 8.5.1-021, update to a version that fixes this issue. As a temporary workaround, consider restricting FTP sessions to minimize the risk of exploitation.