#VU14432 Security restrictions bypass in Cisco Email Security Appliance - CVE-2018-0419
Published: August 15, 2018 / Updated: August 16, 2018
Vulnerability identifier: #VU14432
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2018-0419
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerable software:
Cisco Email Security Appliance
Cisco Email Security Appliance
Software vendor:
Cisco Systems, Inc
Cisco Systems, Inc
Description
The vulnerability allows a remote attacker to bypass security restrictions on the target system.
The vulnerability exists in certain attachment detection mechanisms of Cisco Email Security Appliances (ESA) due to improper detection of content within executable (EXE) files. A remote attacker can send a customized EXE file that is not recognized and blocked by the ESA., bypass the filtering functionality and send email messages that contain malicious executable files to unsuspecting users.
Remediation
Install update from vendor's website.