Unscored CVE-2016-1438 EUVD-2016-2537GHSA-f5gp-267j-g6xq

Cisco AsyncOS 9.7.0-125 on Email Security Appliance (ESA) devices allows remote attackers to bypass intended spam filtering via crafted exe…

Published Jun 23, 2016 · Updated Aug 5, 2024 · Assigned by cisco

Description

Cisco AsyncOS 9.7.0-125 on Email Security Appliance (ESA) devices allows remote attackers to bypass intended spam filtering via crafted executable content in a ZIP archive, aka Bug ID CSCuy39210.

References

1036156 vdb-entry
20160622 Cisco Email Security Appliance .zip File Scanning Security Bypass Vulnerability vendor-advisory