VulnerabilityModified
CVE-2015-0605
The uuencode inspection engine in Cisco AsyncOS on Cisco Email Security Appliance (ESA) devices 8.5 and earlier allows remote attackers to bypass intended content restrictions via a crafted e-mail attachment with uuencode encoding, aka Bug ID CSCzv54343.
MEDIUM 4.3EPSS 1.22%
Does this matter?
Lower severity and a low EPSS score (1.22%). Track it; it rarely justifies an emergency change on its own.
Description
The uuencode inspection engine in Cisco AsyncOS on Cisco Email Security Appliance (ESA) devices 8.5 and earlier allows remote attackers to bypass intended content restrictions via a crafted e-mail attachment with uuencode encoding, aka Bug ID CSCzv54343.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 1.22% probability · 67th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- cisco/asyncos
- Source
- psirt@cisco.com
References
- http://secunia.com/advisories/62829
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0605Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37384Vendor Advisory
- http://www.securityfocus.com/bid/72528
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100695
- http://secunia.com/advisories/62829
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0605Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37384Vendor Advisory
- http://www.securityfocus.com/bid/72528
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100695
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.