Security restrictions bypass in Cisco Email Security Appliance - CVE-2017-12353
Published: December 1, 2017
Vulnerability identifier: #VU9514
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-12353
CWE-ID: CWE-388
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to bypass security restrictions on the target system.
The weakness exists in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) due to improper error handling of a malformed MIME header in an email attachment. A remote attacker can send an email with a crafted MIME attachment and bypass configured user filters to drop the email.
The weakness exists in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) due to improper error handling of a malformed MIME header in an email attachment. A remote attacker can send an email with a crafted MIME attachment and bypass configured user filters to drop the email.
Affected software
Cisco Email Security Appliance
How to mitigate CVE-2017-12353
Install update from vendor's website.