A vulnerability in the Sender Policy Framework (SPF) functionality of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to bypass configured user filters on the device. The vulnerability is due to incomplete input and validation checking mechanisms for certain SPF messages that are sent to an affected device. An attacker could exploit this vulnerability by sending a customized SPF packet to an affected device. A successful exploit could allow the attacker to bypass the header filters that are configured for the affected device, which could allow malicious content to pass through the device.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: cisco
Published: 2019-08-08T07:30:33.594133Z
Updated: 2024-09-17T00:05:45.093Z
Reserved: 2018-12-06T00:00:00
Link: CVE-2019-1955
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2019-08-08T08:15:12.537
Modified: 2023-03-29T16:25:09.990
Link: CVE-2019-1955
Redhat
No data.