HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2019-1947

CVSS 8.6v3.1pub. 2020-09-23upd. 2024-11-21

A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause the CPU utilization to increase to 100 percent, causing a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of email messages that contain large attachments. An attacker could exploit this vulnerability by sending a malicious email message through the targeted device. A successful exploit could allow the attacker to cause a permanent DoS condition due to high CPU utilization. This vulnerability may require manual intervention to recover the ESA.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

  • Cisco Asyncos

    OS
    Cisco
    12.1.0-085

  • Cisco Email Security Appliance

    APP
    Cisco
    11.1.0-131
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2025-20393CRITICAL10.0⚠ KEVPL ✓same product

RCE z uprawnieniami root w Cisco Secure Email Gateway i Secure Email and Web Manager

CVE-2022-20798CRITICAL9.8PL ✓same product

Cisco ESA/SMA: pominięcie uwierzytelnienia LDAP w interfejsie webowym

CVE-2024-20435HIGH8.8same product

A vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated, local attac...

CVE-2022-20960HIGH7.5same product

A vulnerability in Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthentica...

CVE-2022-20664HIGH7.7same product

A vulnerability in the web management interface of Cisco Secure Email and Web Manager, formerly Cisco Security...