CVE-2016-1315 describes a bypass vulnerability in the proxy engine of Cisco Advanced Malware Protection (AMP) when integrated with specific versions of the Email Security Appliance (ESA) (9.5.0-201, 9.6.0-051, 9.7.0-125). A remote attacker can exploit this by sending a specially crafted email containing an encoded file, circumventing intended content restrictions. This vulnerability has a CVSS v3 score of 7.5 (High), indicating a high severity. It is easily exploitable over the network with low attack complexity and requires no user interaction, leading to a high impact on integrity. There is no evidence of active exploitation, nor is public exploit code available in Metasploit, Nuclei, or ExploitDB. The vulnerability has received minimal community discussion and media coverage, suggesting it is not widely known or actively targeted.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
9.1.0-032CPE matchmatch criteria | cpe:2.3:o:cisco:email_security_appliance_firmeware:9.1.0-032:*:*:*:*:*:*:* | ||
9.5.0-201CPE matchmatch criteria | cpe:2.3:o:cisco:email_security_appliance_firmeware:9.5.0-201:*:*:*:*:*:*:* | ||
9.6.0-051CPE matchmatch criteria | cpe:2.3:o:cisco:email_security_appliance_firmeware:9.6.0-051:*:*:*:*:*:*:* | ||
9.7.0-125CPE matchmatch criteria | cpe:2.3:o:cisco:email_security_appliance_firmeware:9.7.0-125:*:*:*:*:*:*:* | ||
9.7.0-782CPE matchmatch criteria | cpe:2.3:o:cisco:email_security_appliance_firmeware:9.7.0-782:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.