Code injection

2015-07-1019:59:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.9%

JSON

Cisco AsyncOS on Email Security Appliance (ESA) devices with software 8.5.6-073, 8.5.6-074, and 9.0.0-461, when clustering is enabled, allows remote attackers to cause a denial of service (clustering and SSH outage) via a packet flood, aka Bug IDs CSCur13704 and CSCuq05636.

CPENameOperatorVersion
email_security_applianceeq8.5.6-74
email_security_appliance_firmwareeq9.0.0-461
email_security_appliance_firmwareeq8.5.6-73

Name	Operator	Version
email_security_appliance	eq	8.5.6-74
email_security_appliance_firmware	eq	9.0.0-461
email_security_appliance_firmware	eq	8.5.6-73

References

tools.cisco.com/security/center/viewAlert.x?alertId=39785

www.securityfocus.com/bid/75703

www.securitytracker.com/id/1032855