PT-2016-6934 · Cisco · Cisco Asyncos

Published 2016-11-19 · Updated 2017-07-28 · CVE-2016-6462

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco AsyncOS Software for Cisco Email Security Appliances versions prior to 10.0.0-203 Cisco AsyncOS Software for Cisco Email Security Appliances versions prior to 9.7.2-131

Description A vulnerability in the email filtering functionality could allow an unauthenticated, remote attacker to bypass Advanced Malware Protection (AMP) filters. This issue affects devices where the AMP feature is configured to scan incoming email attachments.

Recommendations For versions prior to 10.0.0-203, update to version 10.0.0-203 or later. For versions prior to 9.7.2-131, update to version 9.7.2-131 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2016-6462

Affected Products

Cisco Asyncos

References · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161116-esa1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-6462 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-6462 · Security Note
• http://securitytracker.com/id/1037307 · Note
• http://securityfocus.com/bid/94360 · Note