Bypass of Email Filtering in Cisco Email Security Appliances

CVE-2016-6462

Summary

A vulnerability exists in the email filtering functionality of Cisco AsyncOS Software, which powers Cisco Email Security Appliances. This flaw allows unauthenticated remote attackers to bypass Advanced Malware Protection (AMP) filters, particularly those configured to scan incoming email attachments. The vulnerability affects all releases of Cisco AsyncOS Software prior to the designated fixed releases. This poses significant risks as it can enable malicious emails to evade detection and reach end users, potentially compromising organizational security.

References