HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2019-1947

CVSS 8.6v3.1pub. 2020-09-23upd. 2024-11-21

A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause the CPU utilization to increase to 100 percent, causing a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of email messages that contain large attachments. An attacker could exploit this vulnerability by sending a malicious email message through the targeted device. A successful exploit could allow the attacker to cause a permanent DoS condition due to high CPU utilization. This vulnerability may require manual intervention to recover the ESA.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

  • Cisco Asyncos

    OS
    Cisco
    12.1.0-085

  • Cisco Email Security Appliance

    APP
    Cisco
    11.1.0-131
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2025-20393CRITICAL10.0⚠ KEVPL ✓ten sam produkt

RCE z uprawnieniami root w Cisco Secure Email Gateway i Secure Email and Web Manager

CVE-2022-20798CRITICAL9.8ten sam produkt

A vulnerability in the external authentication functionality of Cisco Secure Email and Web Manager, formerly k...

CVE-2024-20435HIGH8.8ten sam produkt

A vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated, local attac...

CVE-2022-20960HIGH7.5ten sam produkt

A vulnerability in Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthentica...

CVE-2022-20664HIGH7.7ten sam produkt

A vulnerability in the web management interface of Cisco Secure Email and Web Manager, formerly Cisco Security...