cisco-sa-esa-shrt-dos-wM54R8qA: Cisco Email Security Appliance Shortened URL Denial of Service Vulnerability
First published: Wed Feb 19 2020(Updated: )
A vulnerability in the email message scanning feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a temporary denial of service (DoS) condition on an affected device. The vulnerability is due to inadequate parsing mechanisms for specific email body components. An attacker could exploit this vulnerability by sending a malicious email containing a high number of shortened URLs through an affected device. A successful exploit could allow the attacker to consume processing resources, causing a DoS condition on an affected device. To successfully exploit this vulnerability, certain conditions beyond the control of the attacker must occur. Cisco has released software updates that address the vulnerability described in this advisory. There is a workaround that addresses this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-shrt-dos-wM54R8qA
Credit: This vulnerability was found during the resolution a Cisco TAC support case
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Email Security Appliance Firmware | ||
| Cisco AsyncOS |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-esa-shrt-dos-wM54R8qA?
The severity of cisco-sa-esa-shrt-dos-wM54R8qA is categorized as a denial of service vulnerability.
How do I fix cisco-sa-esa-shrt-dos-wM54R8qA?
To fix cisco-sa-esa-shrt-dos-wM54R8qA, update your Cisco Email Security Appliance and AsyncOS Software to the latest patched version.
What devices are affected by cisco-sa-esa-shrt-dos-wM54R8qA?
All versions of the Cisco Email Security Appliance running Cisco AsyncOS Software are affected by cisco-sa-esa-shrt-dos-wM54R8qA.
Can cisco-sa-esa-shrt-dos-wM54R8qA be exploited remotely?
Yes, cisco-sa-esa-shrt-dos-wM54R8qA can be exploited by an unauthenticated remote attacker.
What are the potential impacts of cisco-sa-esa-shrt-dos-wM54R8qA?
The potential impact of cisco-sa-esa-shrt-dos-wM54R8qA is a temporary denial of service condition on the affected device.
- agent/type
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- collector/cisco-advisory
- source/Cisco
- agent/references
- agent/severity
- agent/weakness
- agent/remedy
- agent/description
- agent/title
- agent/author
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco email security appliance firmware
- canonical/cisco asyncos