| Package | Affected versions | Patched versions |
|---|---|---|
| content security management appliance | = 9.1.0= 9.1.0-004= 9.1.0-031= 9.1.0-033= 9.1.0-103= 9.5.0= 9.6.0 | |
| email security appliance | = 9.6.0-000= 9.6.0-042= 9.6.0-051= 9.7.1-066= 9.9.6-026= 9.9_base | |
| web security appliance | = 9.0.0-162= 9.1.0-000= 9.1.0-070= 9.1_base= 9.5.0-235= 9.5.0-284= 9.5.0-444= 9.5_base |
The FTP service in Cisco AsyncOS on Email Security Appliance (ESA) devices 9.6.0-000 through 9.9.6-026, Web Security Appliance (WSA) devices 9.0.0-162 through 9.5.0-444, and Content Security Management Appliance (SMA) devices allows remote attackers to cause a denial of service via a flood of FTP traffic, aka Bug IDs CSCuz82907, CSCuz84330, and CSCuz86065.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free