Denial of Service Vulnerability in Cisco Email Security and Web Security Appliances
CVE-2016-6416

5.9MEDIUM

Key Information:

Vendor: Cisco
Status: Email Security Appliance; Web Security Appliance; Content Security Management Appliance
Vendor: CVE Published:; 5 October 2016

What is CVE-2016-6416?

The FTP service in Cisco AsyncOS running on Email Security Appliance (ESA), Web Security Appliance (WSA), and Content Security Management Appliance (SMA) is susceptible to a denial of service. Remote attackers can exploit this vulnerability by generating a flood of FTP traffic, overwhelming the device and impeding its functionality. This vulnerability affects multiple versions of ESA, WSA, and SMA, potentially disrupting services for those relying on these security appliances for email and web management.