# MA-397.052014: MyCERT Advisory - Cisco Wide Area Application Services Remote Code Execution Vulnerability

**Date:** 23 May 2014  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-397.052014  
**Advisory ID:** MA-397.052014

---

**1.0 Introduction**
Cisco has released a security advisory to address multiple product vulnerabilities, which may allow a remote attacker to execute arbitrary code with elevated privileges.
**2.0 Impact**
Successful exploitation of this vulnerability may allow the attacker to execute arbitrary code on the affected system with elevated privileges.
**3.0 Affected Products**
- Cisco WAAS appliances
- Cisco Virtual WAAS (vWAAS)
- Cisco WAAS modules
**4.0 Recommendation**
Cisco has released free software updates that address the vulnerability described in this advisory. Prior to deploying software, customers are advised to consult their maintenance providers or check the software for feature set compatibility and known issues that are specific to their environments.
MyCERT encourages users and administrators of these products to review the advisories provided by Cisco below and apply any necessary fixes and updates to help mitigate the risks.
- [Cisco Wide Area Application Services Remote Code Execution Vulnerability](http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140521-waas)
Generally, MyCERT advises users of this product to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail: [[email protected]](/cdn-cgi/l/email-protection) or [[email protected]](/cdn-cgi/l/email-protection)
Phone: 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Mobile: +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web: https://www.mycert.org.my
Twitter: http://www.twitter.com/mycert
**5.0 References**
- US CERT: Cisco Releases Security Advisories, May 2014 [online].
<https://www.us-cert.gov/ncas/current-activity/2014/05/21/Cisco-Releases-Security-Advisories>
- Cisco Security Advisory: Cisco Wide Area Application Services Remote Code Execution Vulnerability, May 2014 [online].
[http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140521-waas](https://www.us-cert.gov/ncas/current-activity/2014/05/21/Cisco-Releases-Security-Advisories)
- AUSCERT, May 2014 [online].
<https://www.auscert.org.au/render.html?it=19719>