CVE-2016-6463

CVE-2016-6463 describes a vulnerability in Cisco AsyncOS Software for Cisco Email Security Appliances that allows an unauthenticated, remote attacker to bypass Advanced Malware Protection (AMP) filters. This affects both virtual and hardware versions of the appliances when AMP is configured for incoming email attachments. The vulnerability has a CVSS v3.0 score of 5.3 (Medium), indicating a network-based attack with low complexity and no user interaction required, potentially leading to a loss of confidentiality. While the EPSS score is low, suggesting a low probability of exploitation, the FAUCET Risk Score is 19/100. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE. Organizations should apply the provided fixed releases (10.0.0-203, 9.7.2-131) to mitigate this risk.