PT-2016-6930 · Cisco · Cisco Email Security Appliances+1

Published 2016-11-19 · Updated 2017-07-29 · CVE-2016-6458

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliances versions prior to the first fixed release

Description A vulnerability in the content filtering functionality could allow an unauthenticated, remote attacker to bypass content filters configured on an affected device, potentially causing email that should have been filtered to be forwarded instead. This issue affects devices configured to use a content filter for email attachments that are protected or encrypted.

Recommendations For versions prior to the first fixed release, update to the first fixed release of Cisco AsyncOS Software to resolve the issue. As a temporary workaround, consider disabling the content filtering functionality for email attachments that are protected or encrypted until a patch is available. Restrict access to the content filtering module to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2016-6458

Affected Products

Cisco Asyncos

Cisco Email Security Appliances

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-6458 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161102-esa · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-6458 · Vendor Advisory
• http://securityfocus.com/bid/94074 · Note
• http://securitytracker.com/id/1037182 · Note