PT-2019-2127 · Cisco · Cisco Email Security Appliance

Published 2019-04-17 · Updated 2019-10-09 · CVE-2019-1831

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance (ESA) versions (affected versions not specified)

Description The issue is related to insufficient input validation in the email message scanning function. This could allow a remote attacker to bypass configured content filters on the device by inserting specific character strings in the email body. The attacker may exploit this to affect the integrity of protected information.

Recommendations For Cisco Email Security Appliance (ESA), consider restricting the email message scanning function until a patch is available. As a temporary workaround, avoid using specific character strings in the email body that could be used to bypass content filters. Restrict access to the email scanning module to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2019-01888

CVE-2019-1831

Affected Products

Cisco Email Security Appliance

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2019-1831 · Security Note
• https://bdu.fstec.ru/vul/2019-01888 · Security Note
• https://osv.dev/vulnerability/CVE-2019-1831 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-esa-filter-bypass · Vendor Advisory
• http://securityfocus.com/bid/108021 · Note