CVE-2015-4184

2015-06-1310:59:00

CWE-20

[email protected]

web.nvd.nist.gov

cisco

email security

esa

anti-spam

bypass

dns

spf

remote attack

cve-2015-4184

6.9 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

48.0%

JSON

The anti-spam scanner on Cisco Email Security Appliance (ESA) devices 3.3.1-09, 7.5.1-gpl-022, and 8.5.6-074 allows remote attackers to bypass intended e-mail restrictions via a malformed DNS SPF record, aka Bug IDs CSCuu35853 and CSCuu37733.

CPENameOperatorVersion
cisco:email_security_appliancecisco email security applianceeq3.331-09
cisco:email_security_appliancecisco email security applianceeq8.5.6-074
cisco:email_security_appliancecisco email security applianceeq7.5.1-gpl-022

CPE	Name	Operator	Version
cisco:email_security_appliance	cisco email security appliance	eq	3.331-09
cisco:email_security_appliance	cisco email security appliance	eq	8.5.6-074
cisco:email_security_appliance	cisco email security appliance	eq	7.5.1-gpl-022