PT-2016-6934 · Cisco · Cisco Asyncos

Publicado 2016-11-19 · Atualizado 2017-07-28 · CVE-2016-6462

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco AsyncOS Software for Cisco Email Security Appliances versions prior to 10.0.0-203 Cisco AsyncOS Software for Cisco Email Security Appliances versions prior to 9.7.2-131

Description A vulnerability in the email filtering functionality could allow an unauthenticated, remote attacker to bypass Advanced Malware Protection (AMP) filters. This issue affects devices where the AMP feature is configured to scan incoming email attachments.

Recommendations For versions prior to 10.0.0-203, update to version 10.0.0-203 or later. For versions prior to 9.7.2-131, update to version 9.7.2-131 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2016-6462

Produtos afetados

Cisco Asyncos

Referências · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161116-esa1 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-6462 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-6462 · Nota de Segurança
• http://securitytracker.com/id/1037307 · Nota
• http://securityfocus.com/bid/94360 · Nota