CVE-2016-6360

HIGH

Cisco Email Security Appliance and Web Security Appliance - Partial Denial of Service via AMP Process Restart

Title source: llm
STIX 2.1

Description

A vulnerability in Advanced Malware Protection (AMP) for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote attacker to cause a partial denial of service (DoS) condition due to the AMP process unexpectedly restarting. Affected Products: Cisco AsyncOS Software for Email Security Appliances (ESA) versions 9.5 and later up to the first fixed release, Cisco AsyncOS Software for Web Security Appliances (WSA) all versions prior to the first fixed release. More Information: CSCux56406, CSCux59928. Known Affected Releases: 9.6.0-051 9.7.0-125 8.8.0-085 9.5.0-444 WSA10.0.0-000. Known Fixed Releases: 9.7.1-066 WSA10.0.0-233.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/93910
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1037120
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1037121

Scores

CVSS v3 7.5
EPSS 0.0216
EPSS Percentile 80.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-20
Status published
Products (17)
cisco/email_security_appliance 9.5.0-000
cisco/email_security_appliance 9.5.0-201
cisco/email_security_appliance 9.6.0-000
cisco/email_security_appliance 9.6.0-042
cisco/email_security_appliance 9.6.0-051
cisco/email_security_appliance 9.7.0-125
cisco/web_security_appliance 8.8.0-085
cisco/web_security_appliance 9.0.0-193
cisco/web_security_appliance 9.0_base
cisco/web_security_appliance 9.1.0-000
... and 7 more
Published Oct 28, 2016
Tracked Since Feb 18, 2026