CVE-2016-1423

The CVE-2016-1423 entry documents a vulnerability in Cisco AsyncOS for Cisco Email Security Appliance (ESA) affecting the Messages in Quarantine (MIQ) view. The issue arises from malformed HTML script tags in quarantined email messages, which could allow an unauthenticated remote attacker to caus...

CVE-2016-6356

Cisco AsyncOS for Cisco Email Security Appliances is affected by CVE-2016-6356 due to improper input validation of email attachments with corrupted fields in the message filtering feature. An unauthenticated, remote attacker could trigger a DoS by causing the device to stop scanning/forwarding em...

CVE-2016-1481

The CVE-2016-1481 issue affects Cisco AsyncOS Software used in Cisco Email Security Appliances. Vulnerable component: the email message filtering feature, specifically when processing compressed attachments that contain malformed Design (DGN) files. Root cause: improper handling of compressed DGN...

CVE-2016-1480

The CVE-2016-1480 issue affects Cisco AsyncOS MIME scanner in Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA). It allows an unauthenticated, remote attacker to bypass configured user filters on affected devices when message/content filters scan incoming attachments. Affect...

CVE-2016-1486

CVE-2016-1486 affects Cisco AsyncOS for Cisco Email Security Appliances, specifically the AMP email-attachment scanning feature. The root cause is improper handling in the attachment-scanning process, enabling an unauthenticated, remote attacker to trigger a DoS that stops scanning and forwarding...

CVE-2016-6372

CVE-2016-6372 affects Cisco AsyncOS for Cisco ESA and WSA (MIME header handling). A vulnerability in email message and content filtering due to improper error handling of malformed MIME headers could allow an unauthenticated, remote attacker to bypass the device’s filtering, potentially allowing ...

CVE-2016-6357

A vulnerability in the configured security policies, including drop email filtering, in Cisco AsyncOS for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass a configured drop filter by using an email with a corrupted attachment. More Information:...

CVE-2016-6372

A vulnerability in the email message and content filtering for malformed Multipurpose Internet Mail Extensions MIME headers of Cisco AsyncOS Software for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to bypass the filtering...

Cisco Patches Critical Vulnerability in Facility Events Response System

Cisco Systems issued a security bulletin Wednesday for a critical vulnerability found in its IP Interoperability and Collaboration System IPICS. The feature is a key part of a mechanism used by Cisco to facilitate emergency responses for “facility events.” The vulnerability CVE-2016-6397, accordi...

Cisco AsyncOS Security Bypass Vulnerability (CNVD-2016-10396)

The Cisco AsyncOS operating system is available to enhance the security and performance of Cisco email security appliances. A security bypass vulnerability exists in Cisco AsyncOS that could be exploited by an attacker to bypass certain security restrictions and perform unauthorized operations...

Cisco AsyncOS Security Bypass Vulnerability

The Cisco AsyncOS operating system is available to enhance the security and performance of Cisco email security appliances. A security vulnerability exists in Cisco AsyncOS that could be exploited by an attacker to bypass certain security restrictions and perform unauthorized operations...

Cisco AsyncOS for Email and Web Security Appliances Remote Security Bypass Vulnerability

Cisco AsyncOS for Email and Web Security Appliances are both products of Cisco, Inc.Cisco AsyncOS for Email Security Appliances is a set of operating systems used in the Email Security Appliance ESA of Cisco, Inc.Cisco Web Security Appliance WSA is a set of Web security appliances. Cisco AsyncOS...

Cisco AsyncOS Denial of Service Vulnerability (CNVD-2016-10394)

The Cisco AsyncOS operating system is available to enhance the security and performance of Cisco email security appliances. A remote denial of service vulnerability exists in Cisco AsyncOS, which can be exploited by an unauthenticated, remote attacker to cause a denial of service condition...

Cisco Email Security Appliance Malformed DGN File Attachment Denial of Service Vulnerability

A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability exists because the message filtering feature of...

Cisco AsyncOS Security Bypass Vulnerability (CNVD-2016-10397)

The Cisco AsyncOS operating system is available to enhance the security and performance of Cisco email security appliances. A remote security bypass vulnerability exists in Cisco AsyncOS, where an unauthenticated, remote attacker bypasses a user's configuration on the appliance and performs an...

Cisco AsyncOS Denial of Service Vulnerability (CNVD-2016-10393)

The Cisco AsyncOS operating system is available to enhance the security and performance of Cisco email security appliances. A remote denial of service vulnerability exists in Cisco AsyncOS, which can be exploited by an unauthenticated, remote attacker to cause a denial of service on an affected...

Cisco AsyncOS Denial of Service Vulnerability (CNVD-2016-10395)

The Cisco AsyncOS operating system is available to enhance the security and performance of Cisco email security appliances. A remote denial of service vulnerability exists in Cisco AsyncOS 9.7.1 and later versions, which can be exploited by an unauthenticated, remote attacker to cause a denial of...

Cisco Email Security Appliance MIME Header Bypass Vulnerability

A vulnerability in the email message and content filtering for malformed Multipurpose Internet Mail Extensions MIME headers of Cisco AsyncOS Software for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to bypass the filtering...

Cisco Email Security Appliance Malformed MIME Header Vulnerability

A vulnerability in the Multipurpose Internet Mail Extensions MIME scanner of Cisco AsyncOS Software for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to bypass configured user filters on the device. The vulnerability is due to...

Cisco Email and Web Security Appliance Malformed MIME Header Vulnerability

A vulnerability in the Multipurpose Internet Mail Extensions MIME scanner of Cisco AsyncOS Software for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to bypass configured user filters on the device. The vulnerability is due to...