Severity
8.6HIGH
EPSS
0.3%
top 47.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJan 10
Latest updateMay 13

Description

A vulnerability in the Secure/Multipurpose Internet Mail Extensions (S/MIME) Decryption and Verification or S/MIME Public Key Harvesting features of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause an affected device to corrupt system memory. A successful exploit could cause the filtering process to unexpectedly reload, resulting in a denial of service (DoS) condition on the device. The vulnerability is due to improper input

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HExploitability: 3.9 | Impact: 4.0

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-62wx-gppg-6grr: A vulnerability in the Secure/Multipurpose Internet Mail Extensions (S/MIME) Decryption and Verification or S/MIME Public Key Harvesting features of C2022-05-13
CVEList
Cisco Email Security Appliance Memory Corruption Denial of Service Vulnerability2019-01-10

📋Vendor Advisories

1
Cisco
Cisco Email Security Appliance Memory Corruption Denial of Service Vulnerability2019-01-09
CVE-2018-15453 (HIGH CVSS 8.6) | A vulnerability in the Secure/Multi | cvebase.io