CVE-2013-3386: High severity cisco asyncos vulnerability
The IronPort Spam Quarantine (ISQ) component in the web framework in IronPort AsyncOS on Cisco Email Security Appliance devices before 7.1.5-106 and 7.3, 7.5, and 7.6 before 7.6.3-019 and Content Security Management Appliance devices before 7.9.1-102 and 8.0 before 8.0.0-404 allows remote attackers to cause a denial of service (service crash or hang) via a high rate of TCP connection attempts, aka Bug IDs CSCzv25573 and CSCzv81712.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-3386?
CVE-2013-3386 has been categorized with a high severity rating due to its ability to allow remote attackers unauthorized access.
How do I fix CVE-2013-3386?
To fix CVE-2013-3386, users should upgrade their IronPort AsyncOS to versions 7.1.5-106 or later, or 7.6.3-019 or later.
What products are affected by CVE-2013-3386?
CVE-2013-3386 affects Cisco IronPort AsyncOS versions prior to 7.1.5-106 and specific 7.3, 7.5, 7.6 versions along with earlier versions of Content Security Management Appliances.
Can CVE-2013-3386 be exploited remotely?
Yes, CVE-2013-3386 can be exploited remotely by attackers who can access the IronPort Spam Quarantine component.
What are the consequences of CVE-2013-3386 vulnerability?
The consequences of CVE-2013-3386 could include unauthorized access to sensitive data managed by the email security appliances.