CVE-2019-15971

A vulnerability in the MP3 detection engine of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured content filters on the device. The vulnerability is due to improper validation of certain MP3 file types. An attacker...

CVE-2019-15971 Cisco Email Security Appliance MP3 Content Filter Bypass Vulnerability

A vulnerability in the MP3 detection engine of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured content filters on the device. The vulnerability is due to improper validation of certain MP3 file types. An attacker...

CVE-2019-15971

CVE-2019-15971 affects Cisco AsyncOS on Cisco Email Security Appliance (ESA): the MP3 detection engine fails to validate certain MP3 file types, enabling an unauthenticated, remote attacker to bypass configured content filters by sending a crafted MP3 through the device. The reported impact is by...