← Back to CVEs

CVE-2016-6360

N/A

Description

A vulnerability in Advanced Malware Protection (AMP) for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote attacker to cause a partial denial of service (DoS) condition due to the AMP process unexpectedly restarting. Affected Products: Cisco AsyncOS Software for Email Security Appliances (ESA) versions 9.5 and later up to the first fixed release, Cisco AsyncOS Software for Web Security Appliances (WSA) all versions prior to the first fixed release. More Information: CSCux56406, CSCux59928. Known Affected Releases: 9.6.0-051 9.7.0-125 8.8.0-085 9.5.0-444 WSA10.0.0-000. Known Fixed Releases: 9.7.1-066 WSA10.0.0-233.

CVE Details

CVSS v3.1 ScoreN/A

Published10/28/2016

Last Modified4/12/2025

Sourcenvd

Honeypot Sightings0

Affected Products

cisco:email_security_appliancecisco:web_security_appliance

Weaknesses (CWE)

CWE-20

References

http://www.securityfocus.com/bid/93910(psirt@cisco.com)

http://www.securitytracker.com/id/1037120(psirt@cisco.com)

http://www.securitytracker.com/id/1037121(psirt@cisco.com)

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-esawsa3(psirt@cisco.com)

http://www.securityfocus.com/bid/93910(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1037120(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1037121(af854a3a-2127-422b-91ae-364da2661108)

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-esawsa3(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.