CVE-2016-6372

CVE-2016-6372 describes a vulnerability in Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) running AsyncOS, where malformed MIME headers can bypass email and content filtering. This allows emails that should have been quarantined to be processed, affecting all virtual and hardware appliances with message or content filters scanning incoming attachments. The vulnerability has a CVSSv3 score of 7.5 (HIGH), indicating a network-based attack with low complexity, requiring no privileges or user interaction, and potentially leading to high confidentiality impact by allowing malicious content to reach users. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage regarding this CVE.