What is the severity of CVE-2017-3800?

CVE-2017-3800 has a medium severity rating that can allow unauthorized access to bypass configured filters.

How do I fix CVE-2017-3800?

To fix CVE-2017-3800, update the Cisco Email Security Appliance to a patched version as recommended by Cisco.

What are the affected versions in CVE-2017-3800?

CVE-2017-3800 affects Cisco Email Security Appliance firmware versions prior to the fixes released in 9.7.1-067 and 9.8.5-086.

Can CVE-2017-3800 be exploited remotely?

Yes, CVE-2017-3800 can be exploited remotely by an unauthenticated attacker.

What impact does CVE-2017-3800 have on email security?

CVE-2017-3800 allows attackers to bypass message and content filters, which undermines email security protocols.

Vulnerability/
CVE-2017-3800

medium

5.8

CWE

26/1/2017

26/7/2017

CVE-2017-3800: Input Validation

First published: Thu Jan 26 2017(Updated: )

A vulnerability in the content scanning engine of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to bypass configured message or content filters on the device. Affected Products: This vulnerability affects all releases prior to the first fixed release of Cisco AsyncOS Software for Cisco Email Security Appliances, both virtual and hardware appliances, if the software is configured to apply a message filter or content filter to incoming email attachments. The vulnerability is not limited to any specific rules or actions for a message filter or content filter. More Information: CSCuz16076. Known Affected Releases: 9.7.1-066 9.7.1-HP2-207 9.8.5-085. Known Fixed Releases: 10.0.1-083 10.0.1-087.

Credit: ykramarz@cisco.com

Affected Software	Affected Version	How to fix
Cisco Email Security Appliance Firmware	=9.7.1-066
Cisco Email Security Appliance Firmware	=9.7.1-hp2-207
Cisco Email Security Appliance Firmware	=9.8.5-085

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2017-3800?
CVE-2017-3800 has a medium severity rating that can allow unauthorized access to bypass configured filters.
How do I fix CVE-2017-3800?
To fix CVE-2017-3800, update the Cisco Email Security Appliance to a patched version as recommended by Cisco.
What are the affected versions in CVE-2017-3800?
CVE-2017-3800 affects Cisco Email Security Appliance firmware versions prior to the fixes released in 9.7.1-067 and 9.8.5-086.
Can CVE-2017-3800 be exploited remotely?
Yes, CVE-2017-3800 can be exploited remotely by an unauthenticated attacker.
What impact does CVE-2017-3800 have on email security?
CVE-2017-3800 allows attackers to bypass message and content filters, which undermines email security protocols.

agent/last-modified-date
agent/softwarecombine
agent/first-publish-date
agent/tags
agent/weakness
agent/type
agent/author
agent/event
agent/description
collector/nvd-index
agent/software-canonical-lookup-request
agent/references
agent/severity
vendor/cisco
canonical/cisco email security appliance firmware
version/cisco email security appliance firmware/9.7.1-066
version/cisco email security appliance firmware/9.7.1-hp2-207
version/cisco email security appliance firmware/9.8.5-085

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2017-3800?
CVE-2017-3800 has a medium severity rating that can allow unauthorized access to bypass configured filters.
How do I fix CVE-2017-3800?
To fix CVE-2017-3800, update the Cisco Email Security Appliance to a patched version as recommended by Cisco.
What are the affected versions in CVE-2017-3800?
CVE-2017-3800 affects Cisco Email Security Appliance firmware versions prior to the fixes released in 9.7.1-067 and 9.8.5-086.
Can CVE-2017-3800 be exploited remotely?
Yes, CVE-2017-3800 can be exploited remotely by an unauthenticated attacker.
What impact does CVE-2017-3800 have on email security?
CVE-2017-3800 allows attackers to bypass message and content filters, which undermines email security protocols.