CVE-2020-3133

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance (ESA) (affected versions not specified)

Description A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured filters on the device. The issue is due to improper validation of incoming emails. An attacker could exploit this by sending a crafted email message to a recipient protected by the ESA, potentially allowing malicious content to pass through the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.