Read the docs
TI-2016-01302 Aliases CVE-2016-1411GHSA-cf26-vfrc-6mw2

Cryptographic flaw in Cisco AsyncOS

Priority LOW 29CWE-310Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
None · High · None
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

A vulnerability in the update functionality of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Content Management Security Appliance (SMA) could allow an unauthenticated, remote attacker to impersonate the update server. More Information: CSCul88715, CSCul94617, CSCul94627. Known Affected Releases: 7.5.2-201 7.6.3-025 8.0.1-023 8.5.0-000 8.5.0-ER1-198 7.5.2-HP2-303 7.7.0-608 7.7.5-835 8.5.1-021 8.8.0-000 7.9.1-102 8.0.0-404 8.1.1-013 8.2.0-222. Known Fixed Releases: 8.0.2-069 8.0.2-074 8.5.7-042 9.1.0-032 8.5.2-027 9.6.1-019.

Why it matters now

EPSS 0.01121 66th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Cisco AsyncOSCisco AsyncOS—No fix listedCNA
  • Cisco AsyncOS Vendor— Affected Cisco AsyncOS Fixed in — No fix listed CNA

CPE configurations NVD · 16

CPEVersionsRoleVendor
cpe:2.3:a:cisco:content_security_management_appliance:9.1.0:*:*:*:*:*:*:*9.1.0VulnerableCisco
cpe:2.3:a:cisco:content_security_management_appliance:9.1.0-004:*:*:*:*:*:*:*9.1.0-004VulnerableCisco
cpe:2.3:a:cisco:content_security_management_appliance:9.1.0-031:*:*:*:*:*:*:*9.1.0-031VulnerableCisco
cpe:2.3:a:cisco:content_security_management_appliance:9.1.0-033:*:*:*:*:*:*:*9.1.0-033VulnerableCisco
cpe:2.3:a:cisco:content_security_management_appliance:9.1.0-103:*:*:*:*:*:*:*9.1.0-103VulnerableCisco
cpe:2.3:a:cisco:content_security_management_appliance:9.6.0:*:*:*:*:*:*:*9.6.0VulnerableCisco
cpe:2.3:a:cisco:email_security_appliance:7.5.2-201:*:*:*:*:*:*:*7.5.2-201VulnerableCisco
cpe:2.3:a:cisco:email_security_appliance:7.5.2-hp2-303:*:*:*:*:*:*:*7.5.2-hp2-303VulnerableCisco
cpe:2.3:a:cisco:email_security_appliance:7.6.3-025:*:*:*:*:*:*:*7.6.3-025VulnerableCisco
cpe:2.3:a:cisco:email_security_appliance:8.0.1-023:*:*:*:*:*:*:*8.0.1-023VulnerableCisco
  • cpe:2.3:a:cisco:content_security_management_appliance:9.1.0:*:*:*:*:*:*:* Versions 9.1.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:content_security_management_appliance:9.1.0-004:*:*:*:*:*:*:* Versions 9.1.0-004 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:content_security_management_appliance:9.1.0-031:*:*:*:*:*:*:* Versions 9.1.0-031 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:content_security_management_appliance:9.1.0-033:*:*:*:*:*:*:* Versions 9.1.0-033 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:content_security_management_appliance:9.1.0-103:*:*:*:*:*:*:* Versions 9.1.0-103 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:content_security_management_appliance:9.6.0:*:*:*:*:*:*:* Versions 9.6.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:email_security_appliance:7.5.2-201:*:*:*:*:*:*:* Versions 7.5.2-201 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:email_security_appliance:7.5.2-hp2-303:*:*:*:*:*:*:* Versions 7.5.2-hp2-303 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:email_security_appliance:7.6.3-025:*:*:*:*:*:*:* Versions 7.6.3-025 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:email_security_appliance:8.0.1-023:*:*:*:*:*:*:* Versions 8.0.1-023 Vulnerable ·Cisco
Show 6 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:cisco:email_security_appliance:8.5.0-000:*:*:*:*:*:*:*8.5.0-000VulnerableCisco
cpe:2.3:a:cisco:email_security_appliance:8.5.0-er1-198:*:*:*:*:*:*:*8.5.0-er1-198VulnerableCisco
cpe:2.3:a:cisco:email_security_appliance:8.5.1-021:*:*:*:*:*:*:*8.5.1-021VulnerableCisco
cpe:2.3:a:cisco:web_security_appliance:7.7.0-608:*:*:*:*:*:*:*7.7.0-608VulnerableCisco
cpe:2.3:a:cisco:web_security_appliance:7.7.5-835:*:*:*:*:*:*:*7.7.5-835VulnerableCisco
cpe:2.3:a:cisco:web_security_appliance:8.8.0-000:*:*:*:*:*:*:*8.8.0-000VulnerableCisco
  • cpe:2.3:a:cisco:email_security_appliance:8.5.0-000:*:*:*:*:*:*:* Versions 8.5.0-000 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:email_security_appliance:8.5.0-er1-198:*:*:*:*:*:*:* Versions 8.5.0-er1-198 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:email_security_appliance:8.5.1-021:*:*:*:*:*:*:* Versions 8.5.1-021 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:web_security_appliance:7.7.0-608:*:*:*:*:*:*:* Versions 7.7.0-608 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:web_security_appliance:7.7.5-835:*:*:*:*:*:*:* Versions 7.7.5-835 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:web_security_appliance:8.8.0-000:*:*:*:*:*:*:* Versions 8.8.0-000 Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2016-1411
  2. 2026-10-03 Alias added: GHSA-cf26-vfrc-6mw2

References

Advisory 1

  • TI-2016-01993 The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other… CVSS 3.1HIGH 7.5
  • TI-2014-01669 The End User Safelist/Blocklist (aka SLBL) service in Cisco AsyncOS Software for Email… CVSS 2.0HIGH 8.5
  • TI-2015-05308 Cisco AsyncOS before 8.5.7-042, 9.x before 9.1.0-032, 9.1.x before 9.1.1-023, and 9.5.x… CVSS 2.0HIGH 7.8
  • TI-2013-04730 The web framework on Cisco Web Security Appliance (WSA), Email Security Appliance (ESA)… CVSS 2.0HIGH 7.8
  • TI-2019-01602 Cisco Email Security Appliance and Cisco Content Security Management Appliance Denial of Service Vulnerability CVSS 3.1MEDIUM 5.3
  • TI-2020-02726 Cisco ESA, Cisco WSA, and Cisco SMA GUI Denial of Service Vulnerability CVSS 3.1MEDIUM 5.3
See all 26 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences