A vulnerability in the update functionality of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA), Cisco Web Security Applianc…

Published 9 y ago 2016-12-14 · modified 4 mo ago 2026-06-17 · JSON

CVSS

5.9

v3.0 · NVD

CISA KEV

not known exploited

EPSS

1.1%

percentile 66%

Public exploits

none known

A vulnerability in the update functionality of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Content Management Security Appliance (SMA) could allow an unauthenticated, remote attacker to impersonate the update server. More Information: CSCul88715, CSCul94617, CSCul94627. Known Affected Releases: 7.5.2-201 7.6.3-025 8.0.1-023 8.5.0-000 8.5.0-ER1-198 7.5.2-HP2-303 7.7.0-608 7.7.5-835 8.5.1-021 8.8.0-000 7.9.1-102 8.0.0-404 8.1.1-013 8.2.0-222. Known Fixed Releases: 8.0.2-069 8.0.2-074 8.5.7-042 9.1.0-032 8.5.2-027 9.6.1-019.

Exploit prediction (EPSS)

1.12% probability of exploitation in the next 30 days, higher than 66% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.0	5.9	`CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N`
NVD	2.0	4.3	`AV:N/AC:M/Au:N/C:N/I:P/A:N`

Affected products

n/a Cisco AsyncOS

Classification

Weakness

CWE-310 Cryptographic Issues

References

tools.cisco.com /security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-asyncos · x_refsource_CONFIRM, x_transferred
securityfocus.com /bid/94791 · vdb-entry, x_refsource_BID, x_transferred

Sources

CVE List: CVE-2016-1411
NVD: CVE-2016-1411

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.