CVE-2016-6356
Published Oct 28, 2016
Last updated 7 years ago
Overview
- Description
- A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an affected device to stop scanning and forwarding email messages due to a denial of service (DoS) condition. Affected Products: This vulnerability affects all releases prior to the first fixed release of Cisco AsyncOS Software for Cisco Email Security Appliances, both virtual and hardware appliances, if the software is configured to apply a message filter or content filter to incoming email attachments. The vulnerability is not limited to any specific rules or actions for a message filter or content filter. More Information: CSCuz63143. Known Affected Releases: 8.5.7-042 9.7.0-125. Known Fixed Releases: 10.0.0-125 9.1.1-038 9.7.2-047.
- Source
- ykramarz@cisco.com
- NVD status
- Modified
Risk scores
CVSS 3.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 3.6
- Exploitability score
- 3.9
- Vector string
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Severity
- HIGH
CVSS 2.0
- Type
- Primary
- Base score
- 7.8
- Impact score
- 6.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
- nvd@nist.gov
- CWE-20
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:3.3.1-09:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B447F5BF-B930-412C-BB5B-76FB59F2131F"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:7.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3CD539F0-FB4C-43BB-B84D-8EB2D5780C30"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:7.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E0119B5B-0DE1-40DE-B987-5BD090C46396"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:7.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4C9B9EA8-AC3E-46B5-9E1A-C5CDA49C2417"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:7.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3584055D-21D7-4701-A6DA-3A42037C235D"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:7.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "98F65C35-8F6C-443A-8A70-507E2BECE434"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:7.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C08DF98F-D463-444A-9C99-3D9F598AD35D"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:7.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "72B46B14-F730-4C19-B990-7A97180A6B76"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:7.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "47B559C5-4D63-4F19-B52D-71AE2D057983"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:7.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0A024420-2138-45C2-A1B1-D9E6C421CC43"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:7.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7B7861DE-6DC4-445E-B881-E731E78C933E"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:7.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8C1883A6-FD4A-4E06-AA83-C2E1035C5BE2"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:7.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8209F5B3-2F65-4976-86CE-8C3F92D6D053"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:7.5.2-201:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11E2D3BA-C2EF-4178-B1EA-0E2318DAFE37"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:7.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "048157E8-DC18-47D6-8061-6D209C4B640A"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:7.6.1-000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C970A35B-04DD-45A4-A739-585ACEE496AA"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:7.6.1-gpl-022:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FCC3BF72-7CD4-47F8-B98F-7D61802A22BF"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:7.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "82842FC8-6041-4FD6-AA4B-818052798F01"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:7.6.3-000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AA18CA46-D4FA-48C8-A632-9C618C4C647C"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:7.6.3-025:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CD7AD8D8-C690-47C6-8A58-8499266F9659"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:7.7.0-000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E6096CDB-3908-4E75-A9B6-285738C582B1"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:7.7.1-000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "38B13FE0-91B3-48AC-83D5-839E9C49AF10"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:7.8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9F11D078-2A4A-40C2-8DBA-3A9529355245"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:7.8.0-311:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6B9C47AD-38DA-44BE-8868-A21F93332783"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:8.0.1-023:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5FABFD96-9076-4838-A775-7DA478214760"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:8.0_base:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6D070904-FF6A-4356-A6B9-FC572CF4ADEA"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:8.5.0-000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DCB92F9E-9FA2-4D50-82C2-FF0A20EB42FF"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:8.5.0-er1-198:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0D9AFCF6-AFC3-4466-AB77-DA77090BBE0C"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:8.5.6-052:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A511EEC7-A7B4-46A0-9182-42B6FFB0E103"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:8.5.6-073:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2E8A45A9-0835-4F4D-99D1-4E894EE95B5E"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:8.5.6-074:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C69F7FA3-F8FD-430F-B70C-FBFC3C1A2D04"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:8.5.6-106:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5EFD829C-2BA8-4EA6-A846-74776A05D105"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:8.5.6-113:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A831B2A-A23C-4BB4-B64C-ADD2C77D96E3"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:8.5.7-042:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "46895808-4225-42FB-BA8B-12ADFADAB4AA"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:8.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54E7090B-6FB0-4161-8534-BD2561B1C203"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:8.6.0-011:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "62CA88FC-047E-4EA4-B3E9-E903DD1892CC"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:8.9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6A4A2C13-FB68-4DAD-AC0E-A90260655F33"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:8.9.1-000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B574E66D-783A-48E6-A04A-16E0B1A56EBD"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:8.9.2-032:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CE973E6A-4BE5-44D7-9E66-B966377F2315"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DE6412D3-E788-45F8-B4E5-4795CD88F3C9"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.0.0-212:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "79408E18-14BE-486A-AAD1-95A3871CCD21"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.0.0-461:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "44F4ABDB-16DC-4D8F-B2D8-9724133F40BB"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.0.5-000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F8A2F388-FFE1-43BD-A9B6-D21043F86AA2"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "57F398CF-66B8-4BE1-8586-1DCD1FF8C3C7"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.1.0-011:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9EF05089-FDC2-4D78-9949-B313A11A3FF2"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.1.0-032:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22602224-5873-4B62-A3B4-66B9E590B73E"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.1.0-101:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C301DE3-99C7-415A-9D1B-8DDD00E4E5D5"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA369D6F-7011-49CF-B0E7-D1B7A2D1B719"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.4.4-000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D328123-3F80-4686-A464-574CDFF67247"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.5.0-000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C17D2028-25C5-4234-8723-7040DCFBEE92"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.5.0-201:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EF846D4C-F7A2-4C27-A2A3-CFE5E76DE5F3"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.6.0-000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "98D691BA-8205-4C49-851B-2FDC1F22F641"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.6.0-042:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ED373FBD-1BB7-4532-946F-9DA2DF33A8D1"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.6.0-051:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A450E5F-D02B-4F4D-9844-794D6A39D923"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.7.0-125:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61E682A3-28D4-4163-B047-DAD05D404128"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.7.1-066:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "72DADB2C-D86D-44B5-B87B-289990A7D9B4"
}
],
"operator": "OR"
}
]
}
]