PT-2016-6937 · Cisco · Cisco Email Security Appliances+2

Publicado 2016-12-14 · Atualizado 2017-01-05 · CVE-2016-6465

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco AsyncOS Software versions prior to the first fixed release

Description A vulnerability in the content filtering functionality could allow an unauthenticated, remote attacker to bypass user filters configured for an affected device. This issue affects Cisco Email Security Appliances and Cisco Web Security Appliances that are configured to use message or content filters to scan incoming email attachments or accessed web content.

Recommendations For versions prior to the first fixed release, update to the first fixed release to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2016-6465

Produtos afetados

Cisco Asyncos

Cisco Email Security Appliances

Cisco Web Security Appliances

Referências · 5

• http://securityfocus.com/bid/94901 · Nota
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-esa · Aviso do Fabricante
• http://securitytracker.com/id/1037404 · Nota
• https://osv.dev/vulnerability/CVE-2016-6465 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-6465 · Nota de Segurança