PT-2017-12408 · Cisco · Cisco Asyncos

Published 2017-09-07 · Updated 2019-10-09 · CVE-2017-12218

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco AsyncOS Software for Cisco Email Security Appliances (ESAs) (affected versions not specified)

Description A vulnerability in the malware detection functionality of Cisco AsyncOS Software for Cisco Email Security Appliances (ESAs) could allow an unauthenticated, remote attacker to cause an email attachment containing malware to be delivered to the end user. This is due to the failure of Advanced Malware Protection (AMP) to scan certain EML attachments that could contain malware. An attacker could exploit this by sending an email with a crafted EML attachment through the targeted device, potentially bypassing configured email message and content filtering, and allowing malware to be delivered to the end user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2017-12218

Affected Products

Cisco Asyncos

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-12218 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-esa · Vendor Advisory
• http://securitytracker.com/id/1039288 · Note
• http://securityfocus.com/bid/100681 · Note