Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Email Security Appliance Denial of Service Vulnerability
Vulnerability Description
A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause the CPU utilization to increase to 100 percent, causing a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of email messages that contain large attachments. An attacker could exploit this vulnerability by sending a malicious email message through the targeted device. A successful exploit could allow the attacker to cause a permanent DoS condition due to high CPU utilization. This vulnerability may require manual intervention to recover the ESA.
CVSS Information
N/A
Vulnerability Type
输入验证不恰当
Vulnerability Title
Cisco Email Security Appliance 和 AsyncOS Software 输入验证错误漏洞
Vulnerability Description
Cisco Email Security Appliance（ESA）是美国思科（Cisco）公司的一个电子邮件安全设备。 Cisco ESA中的AsyncOS Software 12.1.0-085版本和11.1.0-131版本中的邮件过滤功能存在输入验证错误漏洞，该漏洞源于程序没有正确处理带有较大附件的邮件消息。远程攻击者可通过发送恶意的邮件消息利用该漏洞完全占用CPU，造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A