CVE-2016-6416

Published: Oct 5, 2016Modified: May 6, 2026

5.9

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

The FTP service in Cisco AsyncOS on Email Security Appliance (ESA) devices 9.6.0-000 through 9.9.6-026, Web Security Appliance (WSA) devices 9.0.0-162 through 9.5.0-444, and Content Security Management Appliance (SMA) devices allows remote attackers to cause a denial of service via a flood of FTP traffic, aka Bug IDs CSCuz82907, CSCuz84330, and CSCuz86065.

Affected (21)

Products: Cisco: Content Security Management Appliance, Email Security Appliance, Web Security Appliance

Cisco

3 products

Content Security Management Appliance

Email Security Appliance

Web Security Appliance

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Cisco Content Security Management Appliance	Version 9.1.0-004
Cisco Content Security Management Appliance	Version 9.1.0-031
Cisco Content Security Management Appliance	Version 9.1.0-033
Cisco Content Security Management Appliance	Version 9.1.0-103
Cisco Content Security Management Appliance	Version 9.1.0
Cisco Content Security Management Appliance	Version 9.5.0
Cisco Content Security Management Appliance	Version 9.6.0
Cisco Email Security Appliance	Version 9.6.0-000
Cisco Email Security Appliance	Version 9.6.0-042
Cisco Email Security Appliance	Version 9.6.0-051
Cisco Email Security Appliance	Version 9.7.1-066
Cisco Email Security Appliance	Version 9.9.6-026
Cisco Email Security Appliance	Version 9.9_base
Cisco Web Security Appliance	Version 9.0.0-162
Cisco Web Security Appliance	Version 9.1.0-000
Cisco Web Security Appliance	Version 9.1.0-070
Cisco Web Security Appliance	Version 9.1_base
Cisco Web Security Appliance	Version 9.5.0-235
Cisco Web Security Appliance	Version 9.5.0-284
Cisco Web Security Appliance	Version 9.5.0-444
Cisco Web Security Appliance	Version 9.5_base