NVD

Id
21235  
Name
CVE-2016-6462  
Description
A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to bypass Advanced Malware Protection (AMP) filters that are configured for an affected device. This vulnerability affects all releases prior to the first fixed release of Cisco AsyncOS Software for both virtual and hardware versions of Cisco Email Security Appliances, if the AMP feature is configured to scan incoming email attachments. More Information: CSCva13456. Known Affected Releases: 10.0.0-082 10.0.0-125 9.7.1-066. Known Fixed Releases: 10.0.0-203 9.7.2-131.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-11-18  
Modified Date
2016-11-28  
Seq
2016-6462  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
115295 21235 CVE-2016-6462 94360  View
115296 21235 CVE-2016-6462 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161116-esa1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5140 JVNDB-2016-005913 Cisco E メール セキュリティ アプライアンス用 AsyncOS の電子メールフィルタリング機能における設定された AMP フィルタを回避される脆弱性 Cisco E メール セキュリティ アプライアンス (ESA) 用 AsyncOS の電子メールフィルタリング機能には、設定された Advanced Malware Protection (AMP) フィルタを回避される脆弱性が存在します。 CVE-2016-6462 92969 CVE-2016-6462 21235 5 5.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005913.html 2016-11-16 2016-11-24 View