Security restrictions bypass in Cisco Email Security Appliance
| Risk | Low |
| Patch available | YES |
| Number of vulnerabilities | 1 |
| CVE-ID | CVE-2018-0419 |
| CWE-ID | CWE-264 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software Subscribe |
Cisco Email Security Appliance Server applications / IDS/IPS systems, Firewalls and proxy servers |
| Vendor | Cisco Systems, Inc |
Security Bulletin
This security bulletin contains one low risk vulnerability.
1) Security restrictions bypass
EUVDB-ID: #VU14432
Risk: Low
CVSSv3.1:
CVE-ID: CVE-2018-0419
CWE-ID:
CWE-264 - Permissions, Privileges, and Access Controls
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to bypass security restrictions on the target system.
The vulnerability exists in certain attachment detection mechanisms of Cisco Email Security Appliances (ESA) due to improper detection of content within executable (EXE) files. A remote attacker can send a customized EXE file that is not recognized and blocked by the ESA., bypass the filtering functionality and send email messages that contain malicious executable files to unsuspecting users.
MitigationInstall update from vendor's website.
Cisco Email Security Appliance: 10.0.0 203 - 11.0.0 264
CPE2.3 External linksQ & A
Can this vulnerability be exploited remotely?
How the attacker can exploit this vulnerability?
Is there known malware, which exploits this vulnerability?
