CVE-2018-0447 : A vulnerability in the anti-spam protection mechanisms of Cisco AsyncOS Software for the Cisco Email Security Appliance

A vulnerability in the anti-spam protection mechanisms of Cisco AsyncOS Software for the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass certain content filters on an affected device. The vulnerability is due to incomplete input and validation checking mechanisms for certain Sender Policy Framework (SPF) messages that are sent to an affected device. An attacker could exploit this vulnerability by sending a customized SPF packet to an affected device. If successful, an exploit could allow the attacker to bypass the URL filters that are configured for the affected device, which could allow malicious URLs to pass through the device.

Published 2018-10-05 14:29:03

Updated 2019-10-09 23:32:06

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Input validationBypassGain privilege

Exploit prediction scoring system (EPSS) score for CVE-2018-0447

EPSS FAQ

0.11%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 45 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-0447

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:P/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None
5.3	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	3.9	1.4	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: Low Availability: None

CWE ids for CVE-2018-0447

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: nvd@nist.gov (Primary)

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Assigned by: ykramarz@cisco.com (Secondary)

References for CVE-2018-0447

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-esa-url-bypass

Cisco Email Security Appliance URL Filtering Bypass Vulnerability
Vendor Advisory
http://www.securitytracker.com/id/1041687

Cisco Email Security Appliance Sender Policy Framework Message Processing Bug Lets Remote Users Bypass Security Restrictions on the Target System - SecurityTracker
Third Party Advisory;VDB Entry
http://www.securityfocus.com/bid/105300

Cisco AsyncOS for Email Security Appliance CVE-2018-0447 Remote Security Bypass Vulnerability
Third Party Advisory;VDB Entry

Products affected by CVE-2018-0447

Cisco » Email Security Appliance » Version: N/A
cpe:2.3:a:cisco:email_security_appliance:-:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2018-0447

Exploit prediction scoring system (EPSS) score for CVE-2018-0447

CVSS scores for CVE-2018-0447

CWE ids for CVE-2018-0447

References for CVE-2018-0447

Products affected by CVE-2018-0447