CVE-2016-1486
Estado: ModificadaAlta (7.5)—
A vulnerability in the email attachment scanning functionality of the Advanced Malware Protection (AMP) feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an affected device to stop scanning and forwarding email messages due to a denial of service (DoS) condition. Affected Products: This vulnerability affects Cisco AsyncOS Software releases 9.7.1 and later, prior to the first fixed release, for both virtual and hardware Cisco Email Security Appliances, if the AMP feature is configured to scan incoming email attachments. More Information: CSCuy99453. Known Affected Releases: 9.7.1-066. Known Fixed Releases: 10.0.0-125 9.7.1-207 9.7.2-047.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 3.00%
- Percentil entre todas las CVEs puntuadas: 87
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-19
Referencias
- http://www.securityfocus.com/bid/93906
- http://www.securitytracker.com/id/1037124
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-esa2
- http://www.securityfocus.com/bid/93906
- http://www.securitytracker.com/id/1037124
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-esa2
JSON original (NVD)
Mostrar
{
"id": "CVE-2016-1486",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.8,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 6.9,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "psirt@cisco.com",
"affectedData": [
{
"vendor": "n/a",
"product": "Cisco AsyncOS through 9.7.1-066",
"versions": [
{
"status": "affected",
"version": "Cisco AsyncOS through 9.7.1-066"
}
]
}
]
}
],
"published": "2016-10-28T10:59:05.197",
"references": [
{
"url": "http://www.securityfocus.com/bid/93906",
"source": "psirt@cisco.com"
},
{
"url": "http://www.securitytracker.com/id/1037124",
"source": "psirt@cisco.com"
},
{
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-esa2",
"tags": [
"Vendor Advisory"
],
"source": "psirt@cisco.com"
},
{
"url": "http://www.securityfocus.com/bid/93906",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id/1037124",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-esa2",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-19"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the email attachment scanning functionality of the Advanced Malware Protection (AMP) feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an affected device to stop scanning and forwarding email messages due to a denial of service (DoS) condition. Affected Products: This vulnerability affects Cisco AsyncOS Software releases 9.7.1 and later, prior to the first fixed release, for both virtual and hardware Cisco Email Security Appliances, if the AMP feature is configured to scan incoming email attachments. More Information: CSCuy99453. Known Affected Releases: 9.7.1-066. Known Fixed Releases: 10.0.0-125 9.7.1-207 9.7.2-047."
},
{
"lang": "es",
"value": "Una vulnerabilidad en la funcionalidad de escaneo de adjuntos de email de la característica Advanced Malware Protection (AMP) de Cisco AsyncOS Software para Cisco Email Security Appliances podría permitir a un atacante remoto no autenticado provocar que el dispositivo afectado pare el escaneo y reenvíe mensajes de email debido a una condición de denegación de servicio (DoS). Productos afectados: Esta vulnerabilidad afecta a las versiones Cisco AsyncOS Software releases 9.7.1 y posteriores, previas a la primera versión fija, ambos dispositivos virtuales y hardware Cisco Email Security Appliances, si la característica AMP está configurada para escanear los adjuntos de mails entrantes. Más información: CSCuy99453. Lanzamientos conocidos afectados: 9.7.1-066. Lanzamientos conocidos solucionados: 10.0.0-125 9.7.1-207 9.7.2-047."
}
],
"lastModified": "2026-06-17T00:42:03.623",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:8.5.0-000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DCB92F9E-9FA2-4D50-82C2-FF0A20EB42FF"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:8.5.0-er1-198:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0D9AFCF6-AFC3-4466-AB77-DA77090BBE0C"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:8.5.6-052:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A511EEC7-A7B4-46A0-9182-42B6FFB0E103"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:8.5.6-073:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2E8A45A9-0835-4F4D-99D1-4E894EE95B5E"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:8.5.6-074:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C69F7FA3-F8FD-430F-B70C-FBFC3C1A2D04"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:8.5.6-106:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5EFD829C-2BA8-4EA6-A846-74776A05D105"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:8.5.6-113:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A831B2A-A23C-4BB4-B64C-ADD2C77D96E3"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:8.5.7-042:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "46895808-4225-42FB-BA8B-12ADFADAB4AA"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:8.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54E7090B-6FB0-4161-8534-BD2561B1C203"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:8.6.0-011:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "62CA88FC-047E-4EA4-B3E9-E903DD1892CC"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:8.9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6A4A2C13-FB68-4DAD-AC0E-A90260655F33"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:8.9.1-000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B574E66D-783A-48E6-A04A-16E0B1A56EBD"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:8.9.2-032:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CE973E6A-4BE5-44D7-9E66-B966377F2315"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DE6412D3-E788-45F8-B4E5-4795CD88F3C9"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.0.0-212:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "79408E18-14BE-486A-AAD1-95A3871CCD21"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.0.0-461:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "44F4ABDB-16DC-4D8F-B2D8-9724133F40BB"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.0.5-000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F8A2F388-FFE1-43BD-A9B6-D21043F86AA2"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "57F398CF-66B8-4BE1-8586-1DCD1FF8C3C7"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.1.0-011:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9EF05089-FDC2-4D78-9949-B313A11A3FF2"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.1.0-032:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22602224-5873-4B62-A3B4-66B9E590B73E"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.1.0-101:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C301DE3-99C7-415A-9D1B-8DDD00E4E5D5"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.1.1-000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8F0298F5-CE72-4A8A-9AA9-5770BE6081F6"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA369D6F-7011-49CF-B0E7-D1B7A2D1B719"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.4.4-000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D328123-3F80-4686-A464-574CDFF67247"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.5.0-000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C17D2028-25C5-4234-8723-7040DCFBEE92"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.5.0-201:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EF846D4C-F7A2-4C27-A2A3-CFE5E76DE5F3"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.6.0-000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "98D691BA-8205-4C49-851B-2FDC1F22F641"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.6.0-042:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ED373FBD-1BB7-4532-946F-9DA2DF33A8D1"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.6.0-051:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A450E5F-D02B-4F4D-9844-794D6A39D923"
},
{
"criteria": "cpe:2.3:a:cisco:email_security_appliance:9.7.0-125:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61E682A3-28D4-4163-B047-DAD05D404128"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@cisco.com"
}