Home

CVE-2016-1438

Description

Cisco AsyncOS 9.7.0-125 on Email Security Appliance (ESA) devices allows remote attackers to bypass intended spam filtering via crafted executable content in a ZIP archive, aka Bug ID CSCuy39210.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS Score
Exploitation Probability
0.383

Associated Vulnerability

VulnerabilityOS Platform
Cisco Email Security Appliance .zip File Scanning Security Bypass Vulnerability For Cisco IronPort Email Security Appliance SoftwareNCM
Improper Input Validation Vulnerability (CVE-2016-1438)NCM

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-1706003Security Update for Cisco IronPort Email Security Appliance Software 9.7.2-131

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234