PT-2016-6937 · Cisco · Cisco Email Security Appliances+2

Published 2016-12-14 · Updated 2017-01-05 · CVE-2016-6465

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco AsyncOS Software versions prior to the first fixed release

Description A vulnerability in the content filtering functionality could allow an unauthenticated, remote attacker to bypass user filters configured for an affected device. This issue affects Cisco Email Security Appliances and Cisco Web Security Appliances that are configured to use message or content filters to scan incoming email attachments or accessed web content.

Recommendations For versions prior to the first fixed release, update to the first fixed release to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2016-6465

Affected Products

Cisco Asyncos

Cisco Email Security Appliances

Cisco Web Security Appliances

References · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-esa · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-6465 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-6465 · Security Note
• http://securityfocus.com/bid/94901 · Note
• http://securitytracker.com/id/1037404 · Note