PT-2017-12405 · Cisco · Cisco Email Security Appliance+1

Published 2017-09-21 · Updated 2019-10-09 · CVE-2017-12215

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco AsyncOS Software for Cisco Email Security Appliance versions 9.0 through the first fixed release

Description A vulnerability in the email message filtering feature could allow an unauthenticated, remote attacker to cause an affected device to run out of memory and stop scanning and forwarding email messages, resulting in a denial of service (DoS) condition on the device. This occurs when system memory is depleted, causing the filtering process to crash. The vulnerability affects devices configured to apply a message filter or content filter to incoming email attachments, and it is not limited to any specific rules or actions for a message filter or content filter.

Recommendations For Cisco AsyncOS Software for Cisco Email Security Appliance versions 9.0 through the first fixed release, update to the first fixed release to resolve the issue. As a temporary workaround, consider restricting the application of message filters or content filters to incoming email attachments to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2017-12215

Affected Products

Cisco Asyncos

Cisco Email Security Appliance

References · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-esa · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-12215 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-12215 · Security Note
• http://securitytracker.com/id/1039414 · Note
• http://securityfocus.com/bid/100920 · Note