CVE:CVE-2016-1411
CNNVD:CNNVD-201612-276
Cisco AsyncOS on Email Security Appliance（ESA）等都是美国思科（Cisco）公司的产品。Cisco ESA是一套电子邮件安全设备。Cisco Content Security Management Appliance（SMA）是一套内容安全管理设备。Cisco Web Security Appliance（WSA）是一套网络安全设备。Cisco AsyncOS是一套使用在这些产品中的操作系统。
Cisco AsyncOS Software中存在安全漏洞。攻击者可利用该漏洞实施中间人攻击，冒充用户。多款运行该软件的产品受到影响：Cisco Email Security Appliance (ESA)；Cisco Web Security Appliance (WSA)；Cisco Content Management Security Appliance (SMA)。
solution:Upgrade cisco content_security_management_appliance to a higher version than 9.1.0,9.1.0-004,9.1.0-031,9.1.0-033,9.1.0-103,9.6.0,and avoid the version 9.1.0,9.1.0-004,9.1.0-031,9.1.0-033,9.1.0-103,9.6.0; Upgrade cisco email_security_appliance to a higher version than 7.5.2-201,7.5.2-hp2-303,7.6.3-025,8.0.1-023,8.5.0-000,8.5.0-er1-198,8.5.1-021,and avoid the version 7.5.2-201,7.5.2-hp2-303,7.6.3-025,8.0.1-023,8.5.0-000,8.5.0-er1-198,8.5.1-021; Upgrade cisco web_security_appliance to a higher version than 7.7.0-608,7.7.5-835,8.8.0-000,and avoid the version 7.7.0-608,7.7.5-835,8.8.0-000