Remote Code Execution Risk in Cisco AsyncOS for Email Security Appliance and Content Security Management Appliance
CVE-2014-2119

Currently unrated

Key Information:

Vendor

Cisco
Status
Ironport Asyncos
Content Security Management Appliance
Vendor
CVE Published:
21 March 2014

What is CVE-2014-2119?

The End User Safelist/Blocklist (SLBL) service in Cisco AsyncOS software allows remote authenticated users to exploit FTP sessions, enabling them to upload a compromised SLBL database file. This could lead to arbitrary code execution with root privileges, compromising device security. Patching is essential to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://tools.cisco.com/security/center/content/CiscoSecur...
vendor-advisoryx_refsource_CISCO

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.