PT-2019-1184 · Cisco · Cisco Asyncos Software For Cisco Email Security Appliances

Published 2019-01-09 · Updated 2020-09-16 · CVE-2018-15460

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) (affected versions not specified)

Description The issue is related to insufficient input processing in the email message filtering feature, which could allow a remote attacker to cause a denial of service (DoS) condition by sending a specially crafted email message. The vulnerability is due to improper filtering of email messages that contain references to whitelisted URLs. An attacker could exploit this by sending a malicious email message with a large number of whitelisted URLs, potentially causing a sustained DoS condition that could force the affected device to stop scanning and forwarding email messages.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Allocation of Resources Without Limits

RCE

Weakness Enumeration

CWE-770

CWE-20

Related Identifiers

BDU:2019-00252

CVE-2018-15460

Affected Products

Cisco Asyncos Software For Cisco Email Security Appliances

References · 5

• https://osv.dev/vulnerability/CVE-2018-15460 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-esa-url-dos · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-00252 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-15460 · Security Note
• http://securityfocus.com/bid/106507 · Note