cisco-sa-esa-url-bypass-sGcfsDrp: Cisco Email Security Appliance URL Filtering Bypass Vulnerability
A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the URL reputation filters on an affected device. This vulnerability is due to improper processing of URLs. An attacker could exploit this vulnerability by crafting a URL in a particular way. A successful exploit could allow the attacker to bypass the URL reputation filters that are configured for an affected device, which could allow malicious URLs to pass through the device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-url-bypass-sGcfsDrp
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-esa-url-bypass-sGcfsDrp?
The cisco-sa-esa-url-bypass-sGcfsDrp vulnerability is classified as a high severity issue.
How do I fix cisco-sa-esa-url-bypass-sGcfsDrp?
To remediate the cisco-sa-esa-url-bypass-sGcfsDrp vulnerability, upgrade to the latest version of Cisco AsyncOS Software for Cisco Email Security Appliance.
What could happen if cisco-sa-esa-url-bypass-sGcfsDrp is exploited?
If the cisco-sa-esa-url-bypass-sGcfsDrp vulnerability is exploited, an attacker could bypass URL reputation filters and potentially deliver malicious content.
Which versions of Cisco AsyncOS Software are affected by cisco-sa-esa-url-bypass-sGcfsDrp?
Cisco AsyncOS Software for versions below 14.0.1 are affected by the cisco-sa-esa-url-bypass-sGcfsDrp vulnerability.
Is authentication required to exploit cisco-sa-esa-url-bypass-sGcfsDrp?
No, the cisco-sa-esa-url-bypass-sGcfsDrp vulnerability can be exploited by unauthenticated, remote attackers.