CVE-2014-2119

The End User Safelist/Blocklist (aka SLBL) service in Cisco AsyncOS Software for Email Security Appliance (ESA) before 7.6.3-023 and 8.x before 8.0.1-023 and…

published March 20, 2014

CVSS
—
EPSS
3%
Percentile
86.1
In the wild
Unconfirmed
What it is

The End User Safelist/Blocklist (aka SLBL) service in Cisco AsyncOS Software for Email Security Appliance (ESA) before 7.6.3-023 and 8.x before 8.0.1-023 and Cisco Content Security Management Appliance (SMA) before 7.9.1-110 and 8.x before 8.1.1-013 allows remote authenticated users to execute arbitrary code with root privileges via an FTP session that uploads a modified SLBL database file, aka Bug IDs CSCug79377 and CSCug80118.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02742 · 86.1th percentile
Published
2014-03-20T20:00Z
EPSS history
Timeline
  • 20 MAR 20:00Z
    The End User Safelist/Blocklist (aka SLBL) service in Cisco AsyncOS Software for Email Security Appliance (ESA) before 7.6.3-023 and 8.x before 8.0.1-023 and…
    cvelistv5