CVE-2016-9212

A vulnerability in the Decrypt for End-User Notification configuration parameter of Cisco AsyncOS Software for Cisco Web Security Appliances could allow an unauthenticated, remote attacker to connect to a secure website over Secure Sockets Layer (SSL) or Transport Layer Security (TLS), even if the WSA is configured to block connections to the website. Affected Products: This vulnerability affects Cisco Web Security Appliances if the HTTPS decryption options are enabled and configured for the device to block connections to certain websites. More Information: CSCvb49012. Known Affected Releases: 9.0.1-162 9.1.1-074.

• CWE-20

• http://www.securityfocus.com/bid/94774Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037410Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-wsa1Vendor Advisory
• http://www.securityfocus.com/bid/94774Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037410Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-wsa1Vendor Advisory

Published

Dec 14, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9206A vulnerability in the ccmadmin page of Cisco Unified Commun…
• CVE-2016-9207A vulnerability in the HTTP traffic server component of Cisc…
• CVE-2016-9208A vulnerability in the File Management Utility, the Download…
• CVE-2016-9209A vulnerability in TCP processing in Cisco FirePOWER system …
• CVE-2016-9210A vulnerability in the Cisco Unified Reporting upload tool a…
• CVE-2016-9211A vulnerability in TCP port management in Cisco ONS 15454 Se…
• CVE-2016-9213Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-9214Cisco Identity Services Engine (ISE) contains a vulnerabilit…
• CVE-2016-9215A vulnerability in Cisco IOS XR Software could allow an auth…
• CVE-2016-9216An IKE Packet Parsing Denial of Service Vulnerability in the…
• CVE-2016-9217A vulnerability in Cisco Intercloud Fabric for Business and …
• CVE-2016-9218A vulnerability in Cisco Hybrid Meeting Server could allow a…