// For flags

CVE-2016-6356

 

Severity Score

7.5
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an affected device to stop scanning and forwarding email messages due to a denial of service (DoS) condition. Affected Products: This vulnerability affects all releases prior to the first fixed release of Cisco AsyncOS Software for Cisco Email Security Appliances, both virtual and hardware appliances, if the software is configured to apply a message filter or content filter to incoming email attachments. The vulnerability is not limited to any specific rules or actions for a message filter or content filter. More Information: CSCuz63143. Known Affected Releases: 8.5.7-042 9.7.0-125. Known Fixed Releases: 10.0.0-125 9.1.1-038 9.7.2-047.

Una vulnerabilidad en la característica de filtrado de mensajes de email de Cisco AsyncOS Software para Cisco Email Security Appliances podría permitir a un atacante remoto no autenticado provocar que el dispositivo afectado pare el escaneo y reenvíe mensajes de email debido a una condición de denegación de servicio (DoS). Productos afectados: Esta vulnerabilidad afecta a todas las versiones previas a la primera versión fija de Cisco AsyncOS Software para Cisco Email Security Appliances, ambos dispositivos virtuales y hardware, si el software está configurado para aplicar un filtro de mensajes o un filtro de contenido a los adjuntos de mails entrantes. La vulnerabilidad no está limitada a reglas o acciones específicas del filtro de mensajes o del filtro de contenido. Más información: CSCuz63143. Lanzamientos conocidos afectados: 8.5.7-042 9.7.0-125. Lanzamientos conocidos solucionados: 10.0.0-125 9.1.1-038 9.7.2-047.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2016-07-26 CVE Reserved
  • 2016-10-28 CVE Published
  • 2023-03-07 EPSS Updated
  • 2024-08-06 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-20: Improper Input Validation
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
3.3.1-09
Search vendor "Cisco" for product "Email Security Appliance" and version "3.3.1-09"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
7.1.0
Search vendor "Cisco" for product "Email Security Appliance" and version "7.1.0"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
7.1.1
Search vendor "Cisco" for product "Email Security Appliance" and version "7.1.1"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
7.1.2
Search vendor "Cisco" for product "Email Security Appliance" and version "7.1.2"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
7.1.3
Search vendor "Cisco" for product "Email Security Appliance" and version "7.1.3"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
7.1.4
Search vendor "Cisco" for product "Email Security Appliance" and version "7.1.4"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
7.1.5
Search vendor "Cisco" for product "Email Security Appliance" and version "7.1.5"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
7.3.0
Search vendor "Cisco" for product "Email Security Appliance" and version "7.3.0"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
7.3.1
Search vendor "Cisco" for product "Email Security Appliance" and version "7.3.1"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
7.3.2
Search vendor "Cisco" for product "Email Security Appliance" and version "7.3.2"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
7.5.0
Search vendor "Cisco" for product "Email Security Appliance" and version "7.5.0"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
7.5.1
Search vendor "Cisco" for product "Email Security Appliance" and version "7.5.1"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
7.5.2
Search vendor "Cisco" for product "Email Security Appliance" and version "7.5.2"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
7.5.2-201
Search vendor "Cisco" for product "Email Security Appliance" and version "7.5.2-201"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
7.6.0
Search vendor "Cisco" for product "Email Security Appliance" and version "7.6.0"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
7.6.1-000
Search vendor "Cisco" for product "Email Security Appliance" and version "7.6.1-000"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
7.6.1-gpl-022
Search vendor "Cisco" for product "Email Security Appliance" and version "7.6.1-gpl-022"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
7.6.2
Search vendor "Cisco" for product "Email Security Appliance" and version "7.6.2"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
7.6.3-000
Search vendor "Cisco" for product "Email Security Appliance" and version "7.6.3-000"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
7.6.3-025
Search vendor "Cisco" for product "Email Security Appliance" and version "7.6.3-025"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
7.7.0-000
Search vendor "Cisco" for product "Email Security Appliance" and version "7.7.0-000"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
7.7.1-000
Search vendor "Cisco" for product "Email Security Appliance" and version "7.7.1-000"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
7.8.0
Search vendor "Cisco" for product "Email Security Appliance" and version "7.8.0"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
7.8.0-311
Search vendor "Cisco" for product "Email Security Appliance" and version "7.8.0-311"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
8.0.1-023
Search vendor "Cisco" for product "Email Security Appliance" and version "8.0.1-023"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
8.0_base
Search vendor "Cisco" for product "Email Security Appliance" and version "8.0_base"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
8.5.0-000
Search vendor "Cisco" for product "Email Security Appliance" and version "8.5.0-000"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
8.5.0-er1-198
Search vendor "Cisco" for product "Email Security Appliance" and version "8.5.0-er1-198"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
8.5.6-052
Search vendor "Cisco" for product "Email Security Appliance" and version "8.5.6-052"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
8.5.6-073
Search vendor "Cisco" for product "Email Security Appliance" and version "8.5.6-073"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
8.5.6-074
Search vendor "Cisco" for product "Email Security Appliance" and version "8.5.6-074"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
8.5.6-106
Search vendor "Cisco" for product "Email Security Appliance" and version "8.5.6-106"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
8.5.6-113
Search vendor "Cisco" for product "Email Security Appliance" and version "8.5.6-113"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
8.5.7-042
Search vendor "Cisco" for product "Email Security Appliance" and version "8.5.7-042"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
8.6.0
Search vendor "Cisco" for product "Email Security Appliance" and version "8.6.0"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
8.6.0-011
Search vendor "Cisco" for product "Email Security Appliance" and version "8.6.0-011"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
8.9.0
Search vendor "Cisco" for product "Email Security Appliance" and version "8.9.0"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
8.9.1-000
Search vendor "Cisco" for product "Email Security Appliance" and version "8.9.1-000"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
8.9.2-032
Search vendor "Cisco" for product "Email Security Appliance" and version "8.9.2-032"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
9.0.0
Search vendor "Cisco" for product "Email Security Appliance" and version "9.0.0"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
9.0.0-212
Search vendor "Cisco" for product "Email Security Appliance" and version "9.0.0-212"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
9.0.0-461
Search vendor "Cisco" for product "Email Security Appliance" and version "9.0.0-461"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
9.0.5-000
Search vendor "Cisco" for product "Email Security Appliance" and version "9.0.5-000"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
9.1.0
Search vendor "Cisco" for product "Email Security Appliance" and version "9.1.0"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
9.1.0-011
Search vendor "Cisco" for product "Email Security Appliance" and version "9.1.0-011"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
9.1.0-032
Search vendor "Cisco" for product "Email Security Appliance" and version "9.1.0-032"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
9.1.0-101
Search vendor "Cisco" for product "Email Security Appliance" and version "9.1.0-101"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
9.4.0
Search vendor "Cisco" for product "Email Security Appliance" and version "9.4.0"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
9.4.4-000
Search vendor "Cisco" for product "Email Security Appliance" and version "9.4.4-000"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
9.5.0-000
Search vendor "Cisco" for product "Email Security Appliance" and version "9.5.0-000"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
9.5.0-201
Search vendor "Cisco" for product "Email Security Appliance" and version "9.5.0-201"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
9.6.0-000
Search vendor "Cisco" for product "Email Security Appliance" and version "9.6.0-000"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
9.6.0-042
Search vendor "Cisco" for product "Email Security Appliance" and version "9.6.0-042"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
9.6.0-051
Search vendor "Cisco" for product "Email Security Appliance" and version "9.6.0-051"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
9.7.0-125
Search vendor "Cisco" for product "Email Security Appliance" and version "9.7.0-125"
-
Affected
Cisco
Search vendor "Cisco"
Email Security Appliance
Search vendor "Cisco" for product "Email Security Appliance"
9.7.1-066
Search vendor "Cisco" for product "Email Security Appliance" and version "9.7.1-066"
-
Affected