Bypass Malware Detection in Cisco Email Security Appliance

CVE-2016-1461

What is CVE-2016-1461?

Cisco Email Security Appliance (ESA) running AsyncOS versions up to 9.7.0-125 is susceptible to a vulnerability that enables remote attackers to bypass malware detection through specially crafted email attachments. This flaw could potentially exploit weaknesses in the device's filtering mechanisms, allowing malicious files to evade security measures, consequently leading to serious security risks for organizations relying on email security solutions.

References