CVE-2019-1844
published 2019-05-03CVE-2019-1844: A vulnerability in certain attachment detection mechanisms of the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to…
PriorityP432medium5.3CVSS 3.0
AVNACLPRNUINSUCNILAN
EPSS
1.70%
74.8th percentile
A vulnerability in certain attachment detection mechanisms of the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the filtering functionality of an affected device. The vulnerability is due to improper detection of certain content sent to an affected device. An attacker could exploit this vulnerability by sending certain file types without Content-Disposition information to an affected device. A successful exploit could allow an attacker to send messages that contain malicious content to users.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | cisco_email_security_appliance | >= unspecified < 11.1.1-030 | 11.1.1-030 |
| cisco | email_security_appliance | — | — |
| cisco | email_security_appliance_filter | — | — |
CVSS provenance
nvdv3.05.3MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
vendor_cisco5.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Email Security Appliance Filter Bypass Vulnerability
vendor_cisco·2019-05-01·CVSS 5.3
CVE-2019-1844 [MEDIUM] CWE-20 Cisco Email Security Appliance Filter Bypass Vulnerability
Cisco Email Security Appliance Filter Bypass Vulnerability
A vulnerability in certain attachment detection mechanisms of the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the filtering functionality of an affected device.
The vulnerability is due to improper detection of certain content sent to an affected device. An attacker could exploit this vulnerability by sending certain file types without Content-Disposition information to an affected device. A successful exploit could allow an attacker to send messages that contain malicious content to users.
There are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-s
Cisco
Cisco Email Security Appliance Filter Bypass Vulnerability
vendor_cisco·CVSS 3.0
CVE-2019-1844 Cisco Email Security Appliance Filter Bypass Vulnerability
CVE-2019-1844: Cisco Email Security Appliance Filter Bypass Vulnerability
A vulnerability in certain attachment detection mechanisms of the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the filtering functionality of an affected device. The vulnerability is due to improper detection of certain content sent to an affected device. An attacker could exploit this vulnerability by sending certain file types without Content-Disposition information to an affected device. A successful exploit could allow an attacker to send messages that contain malicious content to users. There are no
CVSS: 3.0
CWE: CWE-20, CWE-20
Bug IDs: CSCvm36810
GHSA
GHSA-gpfw-gg76-25px: A vulnerability in certain attachment detection mechanisms of the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker
ghsa_unreviewed·2022-05-24
CVE-2019-1844 [MEDIUM] CWE-20 GHSA-gpfw-gg76-25px: A vulnerability in certain attachment detection mechanisms of the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker
A vulnerability in certain attachment detection mechanisms of the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the filtering functionality of an affected device. The vulnerability is due to improper detection of certain content sent to an affected device. An attacker could exploit this vulnerability by sending certain file types without Content-Disposition information to an affected device. A successful exploit could allow an attacker to send messages that contain malicious content to users.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-05-03
Published