5.3
Moyenne
CVE-2020-3548 A vulnerability in the Transport Layer Security (TLS) protocol implementation of Cisco AsyncOS software for…
Description
A vulnerability in the Transport Layer Security (TLS) protocol implementation of Cisco AsyncOS software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause high CPU usage on an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to inefficient processing of incoming TLS traffic. An attacker could exploit this vulnerability by sending a series of crafted TLS packets to an affected device. A successful exploit could allow the attacker to trigger a prolonged state of high CPU utilization. The affected device would still be operative, but response time and overall performance may be degraded.There are no workarounds that address this vulnerability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Secure Email | Versions non publiées | |
| secure_email 13.5 | premières → 13.5.1-277 | Pas de correctif indiqué |
Références
- cisco-sa-esa-tls-dos-xW53TBhb sec.cloudapps.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Secure Email
Les 29 CVE de Cisco Secure Email →
CVE-2026-76519
Cisco Secure Email Gateway Relative Path Traversal Vulnerability
9.8
Critique
CVE-2026-76442
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and…
7.5
Élevée
CVE-2026-76461
Cisco Secure Email Gateway SQL Injection Vulnerability
9.8
Critique
CVE-2026-76443
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and…
9.8
Critique