CVE-2018-0419: Input Validation

Published Aug 15, 2018

Updated

A vulnerability in certain attachment detection mechanisms of Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to bypass the filtering functionality of an affected system. The vulnerability is due to the improper detection of content within executable (EXE) files. An attacker could exploit this vulnerability by sending a customized EXE file that is not recognized and blocked by the ESA. A successful exploit could allow an attacker to send email messages that contain malicious executable files to unsuspecting users. Cisco Bug IDs: CSCvh03786.

Affected Software

1 affected component

Cisco Email Security Appliance

Event History

Aug 15, 2018

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the CVE ID of this vulnerability?

CVE-2018-0419

What is the severity level of CVE-2018-0419?

The severity level of CVE-2018-0419 is high with a severity value of 7.5.

How does the vulnerability in Cisco Email Security Appliances (ESA) occur?

The vulnerability in Cisco Email Security Appliances (ESA) occurs due to the improper detection of content within executable (EXE) files.

What are the affected systems by this vulnerability?

The Cisco Email Security Appliance is affected by this vulnerability.

Is authentication required to exploit this vulnerability?

No, an unauthenticated, remote attacker can exploit this vulnerability.