CVE-2017-12218

CVE-2017-12218 concerns Cisco AsyncOS AMP malware-detection in Cisco ESAs. The issue is a failure to scan certain EML attachments, allowing an unauthenticated remote attacker to deliver a malware-laden attachment to end users and bypass email content filtering. Affected product: Cisco AsyncOS Sof...

CVE-2017-12218: Improper Input Validation

A vulnerability in the malware detection functionality within Advanced Malware Protection AMP of Cisco AsyncOS Software for Cisco Email Security Appliances ESAs could allow an unauthenticated, remote attacker to cause an email attachment containing malware to be delivered to the end user. The...

CVE-2017-6746

A vulnerability in the web interface of the Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid administrator credentials. Affected Products: Cisco AsyncOS Software 10...

Command injection

A vulnerability in the web interface of the Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid administrator credentials. Affected Products: Cisco AsyncOS Software 10...

CVE-2017-6746

A vulnerability in the web interface of the Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid administrator credentials. Affected Products: Cisco AsyncOS Software 10...

CVE-2017-6746

The CVE-2017-6746 entry describes a command-injection and root-privilege escalation vulnerability in the web interface of Cisco Web Security Appliance (WSA) running Cisco AsyncOS. Impact requires an authenticated administrator, and the flaw allows remote command execution with root privileges via...

Cisco Email Security Appliance Attachment Filter Bypass Vulnerability

The Cisco Email Security Appliance is a suite of email security appliances.Cisco Content Security Management is a unified email and Web security management solution. An email scanning vulnerability exists in the Cisco AsyncOS Software in the Cisco Email Security Appliance ESA appliance that stems...

Design/Logic Flaw

A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured filters on the device, as demonstrated by the Attachment Filter. More Information: CSCvd34632. Known Affected Release...

PT-2017-17232

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance ESA versions 9.7.1-066 through 10.0.1-087 Description A vulnerability in the email message scanning of Cisco AsyncOS Software could allow an unauthenticated, remote attacker to bypass configured filters on the...

CVE-2017-6671: Improper Input Validation

A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured filters on the device, as demonstrated by the Attachment Filter. More Information: CSCvd34632. Known Affected Release...

Cisco Email Security Appliance Attachment Filter Bypass Vulnerability

A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured filters on the device. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a...

Information disclosure

A vulnerability in the URL filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to bypass a configured URL filter rule. Affected Products: This vulnerability affects all releases prior to the first fixed release of Cisco...

CVE-2017-3870: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the URL filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to bypass a configured URL filter rule. Affected Products: This vulnerability affects all releases prior to the first fixed release of Cisco...

CVE-2017-3827

CVE-2017-3827 affects Cisco AsyncOS MIME scanner in Cisco ESA/WSA. A remote, unauthenticated attacker can bypass configured user filters due to improper handling of malformed MIME headers, enabling bypass of filter protections on affected devices. Affected releases include Cisco ESA/WSA versions ...

CVE-2017-3827: Improper Input Validation

A vulnerability in the Multipurpose Internet Mail Extensions MIME scanner of Cisco AsyncOS Software for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to bypass configured user filters on the device. Affected Products: This...

Cisco Email Security Appliance for AsyncOS Security Bypass Vulnerability

Cisco AsyncOS Software for Cisco Email Security Appliances ESA is a set of operating systems used in Email Security Appliances ESA from Cisco USA. A security vulnerability exists in the Multipurpose Internet Mail Extensions MIME scanner in the Cisco AsyncOS Software for Cisco ESA. A remote attack...

CVE-2017-3818

Cisco AsyncOS for Cisco Email Security Appliances (ESA) contains a vulnerability in the MIME scanner that allows an unauthenticated, remote attacker to bypass configured user filters via a malformed MIME header in attachments. Affected releases are all prior to the first fixed release (9.8.0-092)...

CVE-2017-3818: Improper Input Validation

A vulnerability in the Multipurpose Internet Mail Extensions MIME scanner of Cisco AsyncOS Software for Cisco Email Security Appliances ESA could allow an unauthenticated, remote attacker to bypass configured user filters on the device, aka a Malformed MIME Header Filtering Bypass. This...

Cisco Email Security Appliance Malformed MIME Header Filtering Bypass Vulnerability

A vulnerability in the Multipurpose Internet Mail Extensions MIME scanner of Cisco AsyncOS Software for Cisco Email Security Appliances ESA could allow an unauthenticated, remote attacker to bypass configured user filters on the device. The vulnerability is due to improper error handling of a...

CVE-2017-3800

A vulnerability in the content scanning engine of Cisco AsyncOS Software for Cisco Email Security Appliances ESA could allow an unauthenticated, remote attacker to bypass configured message or content filters on the device. Affected Products: This vulnerability affects all releases prior to the...