PT-2020-1731 · Cisco · Cisco Asyncos+1

Published 2020-02-19 · Updated 2020-10-01 · CVE-2019-1947

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance (ESA) (affected versions not specified)

Description A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause the CPU utilization to increase to 100 percent, causing a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of email messages that contain large attachments. An attacker could exploit this vulnerability by sending a malicious email message through the targeted device. A successful exploit could allow the attacker to cause a permanent DoS condition due to high CPU utilization. This vulnerability may require manual intervention to recover the ESA.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2020-00964

CVE-2019-1947

Affected Products

Cisco Asyncos

Cisco Email Security Appliance

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2019-1947 · Security Note
• https://osv.dev/vulnerability/CVE-2019-1947 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200219-esa-dos · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-00964 · Security Note
• https://t.me/cibsecurity/14822 · Telegram Post