Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Email Security

Cisco Patches 9 Flaws in Email Security Appliance

Cisco announced on Wednesday that it has released software updates for its Email Security Appliances (ESA) to address a total of nine vulnerabilities, including denial-of-service (DoS) and filter bypass issues.

Cisco announced on Wednesday that it has released software updates for its Email Security Appliances (ESA) to address a total of nine vulnerabilities, including denial-of-service (DoS) and filter bypass issues.

The most serious, rated “high severity,” are three DoS flaws in the AsyncOS software for Cisco ESA. The security holes, tracked as CVE-2016-6356, CVE-2016-1486 and CVE-2016-1481, allow a remote, unauthenticated attacker to cause a DoS condition on affected devices using specially crafted emails and malicious attachments.

CVE-2016-1481 and CVE-2016-6356 affect AsyncOS versions 8.0 and prior, 8.5, 9.0, 9.1, 9.5, 9.6, 9.7 and 10.0. Users have been advised to update their installations to versions 9.1.2-041, 9.7.2-065 or 10.0.0-203. The issue identified as CVE-2016-1486 only impacts versions 9.7 and 10.0.

The other vulnerabilities patched by Cisco in its ESA product allow unauthenticated attackers to remotely cause a user to click on a malicious link, trigger a DoS condition, and bypass various filters. Some of these security holes also affect the networking giant’s Web Security Appliances.

All these flaws have been found by Cisco during the resolution of support cases and there is no evidence that any of them have been exploited for malicious purposes.

Cisco also informed customers on Wednesday about a critical unauthorized access vulnerability in the interdevice communications interface of the IP Interoperability and Collaboration System (IPICS) Universal Media Services (UMS).

The vulnerability, identified as CVE-2016-6397, allows a remote attacker to modify configuration parameters and cause the system to become unavailable.

Advertisement. Scroll to continue reading.

Cisco is conducting an investigation to determine if any of its products are affected by the recently disclosed Linux kernel vulnerability dubbed “Dirty COW.” No products have been confirmed to be vulnerable so far, but the company still needs to analyze many applications and devices.

Dirty COW, identified as CVE-2016-5195, is a local privilege escalation vulnerability for which an exploit has been spotted in the wild. The flaw also affects Android and it has already been leveraged for root exploits.

Related: Cisco Forgets to Remove Testing Interface From Security Appliance

Related: Over 840,000 Cisco Devices Affected by NSA-Linked Flaw

Related: Cisco Finds New Zero-Day Linked to “Shadow Brokers” Exploit

Written By

Eduard Kovacs (@EduardKovacs) is a contributing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

SecurityWeek’s Threat Detection and Incident Response Summit brings together security practitioners from around the world to share war stories on breaches, APT attacks and threat intelligence.

Register

Securityweek’s CISO Forum will address issues and challenges that are top of mind for today’s security leaders and what the future looks like as chief defenders of the enterprise.

Register

Expert Insights

Related Content

Cloud Security

Microsoft and Proofpoint are warning organizations that use cloud services about a recent consent phishing attack that abused Microsoft’s ‘verified publisher’ status.

Application Security

Fortinet on Monday issued an emergency patch to cover a severe vulnerability in its FortiOS SSL-VPN product, warning that hackers have already exploited the...

Application Security

Virtualization technology giant VMware on Tuesday shipped urgent updates to fix a trio of security problems in multiple software products, including a virtual machine...

Application Security

Password management firm LastPass says the hackers behind an August data breach stole a massive stash of customer data, including password vault data that...

Application Security

Microsoft on Tuesday pushed a major Windows update to address a security feature bypass already exploited in global ransomware attacks.The operating system update, released...

Application Security

Electric car maker Tesla is using the annual Pwn2Own hacker contest to incentivize security researchers to showcase complex exploit chains that can lead to...

Compliance

Government agencies in the United States have made progress in the implementation of the DMARC standard in response to a Department of Homeland Security...

Email Security

Microsoft is urging customers to install the latest Exchange Server updates and harden their environments to prevent malicious attacks.