CVE-2015-6292: The proxy-cache implementation in Cisco AsyncOS 8.0.x before 8.0.7-151, 8.1.x and 8.5.x before 8.5.2-004, 8...

Security readout for executives and security teams

This CVE affects Cisco Web Security Appliance devices running vulnerable AsyncOS releases. An attacker could consume appliance memory by opening multiple proxy connections, potentially disrupting web proxy availability. The public bundle does not provide CVSS scoring or evidence of active exploitation. Exposure is most likely where Cisco WSA appliances run the listed vulnerable AsyncOS versions and accept proxy connections from untrusted or broad user networks. Treat as a service availability risk for organizations dependent on Cisco WSA for web access control. Prioritize patch planning if vulnerable appliances are still deployed, especially in heavily used proxy environments. Mitigation focus: Check Cisco's advisory for the supported fixed AsyncOS release path.; Upgrade affected WSA appliances beyond the vulnerable versions listed in the CVE.; Restrict proxy access to trusted networks where operationally possible..

Prepared

Jun 13, 2026, 21:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.