Vulnslist

find the latest Cisco vulnerabilities

CVE-2016-1411

A vulnerability in the update functionality of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Content Management Security Appliance (SMA) could allow an unauthenticated, remote attacker to impersonate the update server. More Information: CSCul88715, CSCul94617, CSCul94627. Known Affected Releases: 7.5.2-201 7.6.3-025 8.0.1-023 8.5.0-000 8.5.0-ER1-198 7.5.2-HP2-303 7.7.0-608 7.7.5-835 8.5.1-021 8.8.0-000 7.9.1-102 8.0.0-404 8.1.1-013 8.2.0-222. Known Fixed Releases: 8.0.2-069 8.0.2-074 8.5.7-042 9.1.0-032 8.5.2-027 9.6.1-019.

SeverityMEDIUM
CVSS5.9
CWECWE-310
KEV
Published
Modified

Related Products

Product Advisory
Cisco Web Security Appliance (WSA) cisco-sa-20161207-asyncos
Cisco Secure Web Appliance cisco-sa-20161207-asyncos
Cisco Secure Email and Web Manager cisco-sa-20161207-asyncos
Cisco Secure Email cisco-sa-20161207-asyncos
Cisco Email Security Appliance (ESA) cisco-sa-20161207-asyncos
Cisco Content Security Management Appliance (SMA) cisco-sa-20161207-asyncos