PT-2016-4769 · Cisco · Cisco Email Security Appliance+3

Publicado 2016-12-14 · Atualizado 2016-12-15 · CVE-2016-1411

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cisco AsyncOS Software for Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Content Security Management Appliance (SMA) versions 7.5.2-201 through 8.2.0-222

Description A vulnerability in the update functionality could allow an unauthenticated, remote attacker to impersonate the update server.

Recommendations For versions 7.5.2-201 through 8.2.0-222, update to a fixed release such as 8.0.2-069, 8.0.2-074, 8.5.7-042, 9.1.0-032, 8.5.2-027, or 9.6.1-019 to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2016-1411

Produtos afetados

Cisco Asyncos

Cisco Content Security Management Appliance

Cisco Email Security Appliance

Cisco Web Security Appliance

Referências · 4

• https://osv.dev/vulnerability/CVE-2016-1411 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-1411 · Nota de Segurança
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-asyncos · Aviso do Fabricante
• http://securityfocus.com/bid/94791 · Nota