PT-2017-12518 · Cisco · Cisco Email Security Appliances

Published 2017-11-30 · Updated 2019-10-09 · CVE-2017-12353

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliances (ESA) (affected versions not specified)

Description A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner could allow an unauthenticated, remote attacker to bypass configured user filters on the device. This issue is due to improper error handling of a malformed MIME header in an email attachment. An attacker could exploit this by sending an email with a crafted MIME attachment, potentially allowing them to bypass filters and drop the email. The malformed MIME headers may not be RFC compliant, but some mail clients could still allow users to access the attachment, which may not have been properly filtered.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-254

Related Identifiers

CVE-2017-12353

Affected Products

Cisco Email Security Appliances

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-12353 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-esa · Vendor Advisory
• http://securityfocus.com/bid/102002 · Note
• http://securitytracker.com/id/1039917 · Note