PT-2016-6880
CVE-2016-6406
·
تاريخ النشر
2016-09-22
·
تاريخ التحديث
2017-07-30
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Cisco IronPort AsyncOS versions 9.1.2-023 through 9.1.2-036, versions 9.7.2-046 through 9.7.2-054, and versions 10.0.0-124 through 10.0.0-125
Description
The issue allows remote attackers to obtain root access via a connection to the testing/debugging interface on Email Security Appliance (ESA) devices when the Enrollment Client before version 1.0.2-065 is installed.
Recommendations
For Cisco IronPort AsyncOS versions 9.1.2-023 through 9.1.2-036, update the Enrollment Client to version 1.0.2-065 or later.
For Cisco IronPort AsyncOS versions 9.7.2-046 through 9.7.2-054, update the Enrollment Client to version 1.0.2-065 or later.
For Cisco IronPort AsyncOS versions 10.0.0-124 through 10.0.0-125, update the Enrollment Client to version 1.0.2-065 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾