CVE-2020-3132

CWE-400 — Uncontrolled Resource Consumption5 documents5 sources
Severity
5.9MEDIUM
EPSS
0.9%
top 24.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Cisco Cisco Email Security Appliance (esa)Cisco Cloud Email SecurityCisco Email Security Appliance
Timeline
PublishedFeb 19
Latest updateMay 24

Description

A vulnerability in the email message scanning feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a temporary denial of service (DoS) condition on an affected device. The vulnerability is due to inadequate parsing mechanisms for specific email body components. An attacker could exploit this vulnerability by sending a malicious email containing a high number of shortened URLs through an affected device. A successful e…

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 2.2 | Impact: 3.6

Affected Packages3 packages

▶NVDcisco/email_security_appliance< 12.5.1-037+1
▶CVEListV5cisco/cisco_email_security_appliance_(esa)unspecified — n/a
▶NVDcisco/cloud_email_security< 12.5.1-037+1

🔴Vulnerability Details

2
GHSA
GHSA-xhcj-87mg-4cx4: A vulnerability in the email message scanning feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticate↗2022-05-24
▶
CVEList
Cisco Email Security Appliance Shortened URL Denial of Service Vulnerability↗2020-02-19
▶

💥Exploits & PoCs

1
Exploit-DB
CA Unified Infrastructure Management Nimsoft 7.80 - Remote Buffer Overflow↗2020-03-02
▶

📋Vendor Advisories

1
Cisco
Cisco Email Security Appliance Shortened URL Denial of Service Vulnerability↗2020-02-19
▶