Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.9

Cisco ESA, WSA and SMA FTP can be flooded

CVE-2016-6416 · published 10 years ago
Summary

The FTP service on Cisco Email Security, Web Security and Content Management appliances can be overwhelmed by a flood of FTP traffic, causing the device to stop working. This requires a remote attacker to send a large amount of data to the appliance. Apply the latest software updates from Cisco to correct the issue and prevent the service disruption.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
cisco content_security_management_appliance 9.1.0
9.1.0-004
9.1.0-031
9.1.0-033
9.1.0-103
9.5.0
9.6.0
cpe:2.3:a:cisco:content_security_management_appliance:9.1.0:*:*:*:*:*:*:*
cisco email_security_appliance 9.6.0-000
9.6.0-042
9.6.0-051
9.7.1-066
9.9.6-026
9.9_base
cpe:2.3:a:cisco:email_security_appliance:9.6.0-000:*:*:*:*:*:*:*
cisco web_security_appliance 9.0.0-162
9.1.0-000
9.1.0-070
9.1_base
9.5.0-235
9.5.0-284
9.5.0-444
9.5_base
cpe:2.3:a:cisco:web_security_appliance:9.0.0-162:*:*:*:*:*:*:*
Original advisory text
The FTP service in Cisco AsyncOS on Email Security Appliance (ESA) devices 9.6.0-000 through 9.9.6-026, Web Security Appliance (WSA) devices 9.0.0-162 through 9.5.0-444, and Content Security Manage...
The FTP service in Cisco AsyncOS on Email Security Appliance (ESA) devices 9.6.0-000 through 9.9.6-026, Web Security Appliance (WSA) devices 9.0.0-162 through 9.5.0-444, and Content Security Management Appliance (SMA) devices allows remote attackers to cause a denial of service via a flood of FTP traffic, aka Bug IDs CSCuz82907, CSCuz84330, and CSCuz86065.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.9 Medium
Exploitation
2% chance of attack within 30 days
Type
CWE-119Buffer Overflow
Timeline
Published5 Oct 2016
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2016-6416 · NVD
Track software like this
Free during beta