← Back

CVE-2021-1534

nvd nist
Published: Oct 6, 2021Modified: Nov 21, 2024

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Exploitability: 3.9 / Impact: 1.4
Source: NVD

Description

A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the URL reputation filters on an affected device. This vulnerability is due to improper processing of URLs. An attacker could exploit this vulnerability by crafting a URL in a particular way. A successful exploit could allow the attacker to bypass the URL reputation filters that are configured for an affected device, which could allow malicious URLs to pass through the device.

Affected (1)

Products: Cisco: Asyncos
1 product
Asyncos
Configuration A
1 vulnerable · 7 platform
Vulnerable SoftwareAffected Versions
Before 14.0.1
Running on/withPlatform Versions
Cisco
Email Security Appliance C170
All versions
Cisco
Email Security Appliance C190
All versions
Cisco
Email Security Appliance C380
All versions
Cisco
Email Security Appliance C390
All versions
Cisco
Email Security Appliance C680
All versions
Cisco
Email Security Appliance C690
All versions
Cisco
Email Security Appliance C690x
All versions

Timeline

No history available yet.