CVE:CVE-2013-3443
CNNVD:CNNVD-201307-685
Cisco Wide Area Application Services（WAAS）是美国思科（Cisco）公司的一套广域网链路加速软件。该软件主要用于带宽小和延时大的链路环境。
Central Manager (CM)配置中的Cisco WAAS Software中的Web服务中存在安全漏洞，该漏洞源于程序没有充分验证输入。远程攻击者可通过特制的POST请求到受影响系统，利用该漏洞执行任意代码。Cisco WAAS Software 4.x，Cisco WAAS Software 5.0.3e之前的5.x版本，Cisco WAAS Software 5.1.1c之前的5.1.x版本，Cisco WAAS Software 5.2.1之前的5.2.x版本受到影响。
solution:Upgrade cisco wide_area_application_services to a higher version than 4.0.1,4.0.3,4.0.5,4.0.7,4.0.9,4.0.11,4.0.13,4.0.17,4.0.19,4.0.21,4.0.23,4.0.25,4.0.27,4.1.1,4.1.1:a,4.1.1:b,4.1.1:c,4.1.1:d,4.1.3,4.1.3:a,4.1.3:b,4.1.5:a,4.1.5:b,4.1.5:c,4.1.5:d,4.1.5:e,4.1.5:f,4.1.5:g,4.1.7,4.1.7:a,4.1.7:b,4.2.1,4.2.3,4.2.3:a,4.2.3:b,4.2.3:c,4.3.1,4.3.3,4.3.5,4.3.5:a,4.4.1,4.4.3,4.4.3:a,4.4.3:b,4.4.3:c,4.4.5,4.4.5:a,4.4.5:b,4.4.5:c,4.4.5:d,4.4.7,5.0.1,5.0.3,5.0.3:a,5.0.3:c,5.0.3:d,5.1.1,5.1.1:a,5.1.1:b,5.2,and avoid the version 4.0.1,4.0.3,4.0.5,4.0.7,4.0.9,4.0.11,4.0.13,4.0.17,4.0.19,4.0.21,4.0.23,4.0.25,4.0.27,4.1.1,4.1.1:a,4.1.1:b,4.1.1:c,4.1.1:d,4.1.3,4.1.3:a,4.1.3:b,4.1.5:a,4.1.5:b,4.1.5:c,4.1.5:d,4.1.5:e,4.1.5:f,4.1.5:g,4.1.7,4.1.7:a,4.1.7:b,4.2.1,4.2.3,4.2.3:a,4.2.3:b,4.2.3:c,4.3.1,4.3.3,4.3.5,4.3.5:a,4.4.1,4.4.3,4.4.3:a,4.4.3:b,4.4.3:c,4.4.5,4.4.5:a,4.4.5:b,4.4.5:c,4.4.5:d,4.4.7,5.0.1,5.0.3,5.0.3:a,5.0.3:c,5.0.3:d,5.1.1,5.1.1:a,5.1.1:b,5.2