CVE-2014-3381

The ZIP inspection engine in Cisco AsyncOS 8.5 and earlier on the Cisco Email Security Appliance (ESA) does not properly analyze ZIP archives, which allows…

published October 19, 2014

CVSS
—
EPSS
2%
Percentile
77.1
In the wild
Unconfirmed
What it is

The ZIP inspection engine in Cisco AsyncOS 8.5 and earlier on the Cisco Email Security Appliance (ESA) does not properly analyze ZIP archives, which allows remote attackers to bypass malware filtering via a crafted archive, aka Bug ID CSCup07934.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01718 · 77.1th percentile
Published
2014-10-19T01:00Z
EPSS history
Timeline
  • 19 OCT 01:00Z
    The ZIP inspection engine in Cisco AsyncOS 8.5 and earlier on the Cisco Email Security Appliance (ESA) does not properly analyze ZIP archives, which allows…
    cvelistv5