CVE-2016-1438

CVE-2016-1438 describes a vulnerability in Cisco AsyncOS 9.7.0-125 on Email Security Appliance (ESA) devices, allowing remote attackers to bypass spam filtering. This is achieved by embedding crafted executable content within a ZIP archive, which the ESA fails to properly detect. The vulnerability has a CVSS v3 score of 7.5 (HIGH), indicating a network-based attack with low complexity that can lead to high integrity impact, though confidentiality and availability are not affected. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.