SB2019100220 - Filter Bypass in Cisco AsyncOS for Cisco Email Security Appliance

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2019100220

SB2019100220 - Filter Bypass in Cisco AsyncOS for Cisco Email Security Appliance

Published: October 2, 2019 Updated: February 20, 2020

Security Bulletin ID SB2019100220
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Data manipulation

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Input validation error (CVE-ID: CVE-2019-12706)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green


The vulnerability allows a remote attacker to bypass the configured user filters on an affected device.

The vulnerability exists within the Sender Policy Framework (SPF) functionality due to the affected software insufficiently validates certain incoming SPF messages. A remote attacker can send a custom SPF packet to an affected device and bypass the configured header filters, which could allow malicious content to pass through the device.


Remediation

Install update from vendor's website.

References