CVE-2016-1315: High severity cisco email security appliance firmware vulnerability

Published Feb 12, 2016

Updated

The proxy engine in Cisco Advanced Malware Protection (AMP), when used with Email Security Appliance (ESA) 9.5.0-201, 9.6.0-051, and 9.7.0-125, allows remote attackers to bypass intended content restrictions via a malformed e-mail message containing an encoded file, aka Bug ID CSCux45338.

Affected Software

5 affected components

cisco Email Security Appliance Firmeware=9.1.0-032

cisco Email Security Appliance Firmeware=9.5.0-201

cisco Email Security Appliance Firmeware=9.6.0-051

cisco Email Security Appliance Firmeware=9.7.0-125

cisco Email Security Appliance Firmeware=9.7.0-782

Event History

Feb 12, 2016

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-1315?

CVE-2016-1315 has a medium severity rating, allowing remote attackers to bypass content restrictions.

How do I fix CVE-2016-1315?

To fix CVE-2016-1315, update your Cisco Email Security Appliance firmware to a version higher than the affected releases.

Which versions are vulnerable to CVE-2016-1315?

CVE-2016-1315 affects Cisco Email Security Appliance firmware versions 9.5.0-201, 9.6.0-051, and 9.7.0-125.

What kind of attack is possible with CVE-2016-1315?

CVE-2016-1315 allows attackers to execute a bypass of intended content restrictions through malformed email messages.

Who is affected by CVE-2016-1315?

Organizations using the specified versions of Cisco Email Security Appliance firmware are at risk due to CVE-2016-1315.