CVE-2015-4236

Published: Jul 10, 2015Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cisco AsyncOS on Email Security Appliance (ESA) devices with software 8.5.6-073, 8.5.6-074, and 9.0.0-461, when clustering is enabled, allows remote attackers to cause a denial of service (clustering and SSH outage) via a packet flood, aka Bug IDs CSCur13704 and CSCuq05636.

Affected (3)

Products: Cisco: Email Security Appliance, Email Security Appliance Firmware

Cisco

2 products

Email Security Appliance

Email Security Appliance Firmware

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Cisco Email Security Appliance	Version 8.5.6-074
Cisco Email Security Appliance Firmware	Version 8.5.6-073
Cisco Email Security Appliance Firmware	Version 9.0.0-461