CVE-2017-12218: Input Validation
First published: Thu Sep 07 2017(Updated: )
A vulnerability in the malware detection functionality within Advanced Malware Protection (AMP) of Cisco AsyncOS Software for Cisco Email Security Appliances (ESAs) could allow an unauthenticated, remote attacker to cause an email attachment containing malware to be delivered to the end user. The vulnerability is due to the failure of AMP to scan certain EML attachments that could contain malware. An attacker could exploit this vulnerability by sending an email with a crafted EML attachment through the targeted device. A successful exploit could allow the attacker to bypass the configured ESA email message and content filtering and allow the malware to be delivered to the end user. Vulnerable Products: This vulnerability affects Cisco AsyncOS Software for Cisco ESA, both virtual and hardware appliances, that are configured with message or content filters to scan incoming email attachments on the ESA. Cisco Bug IDs: CSCuz81533.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco AsyncOS Software |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-12218?
CVE-2017-12218 has a moderate severity rating due to the potential impact of allowing malware-laden emails to reach end users.
How do I fix CVE-2017-12218?
To fix CVE-2017-12218, update to the latest version of Cisco AsyncOS for Email Security Appliances.
What type of attack is described in CVE-2017-12218?
CVE-2017-12218 describes an unauthenticated remote attack that compromises malware detection in email attachments.
Who is affected by CVE-2017-12218?
CVE-2017-12218 affects users of Cisco Email Security Appliances running vulnerable versions of Cisco AsyncOS.
What does CVE-2017-12218 allow attackers to do?
CVE-2017-12218 allows attackers to deliver email attachments containing malware to end users.
- agent/tags
- agent/severity
- agent/description
- agent/type
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/weakness
- agent/author
- agent/references
- vendor/cisco
- canonical/cisco asyncos software