Unscored severity · published Feb 7, 2015
CVE-2015-0605
The uuencode inspection engine in Cisco AsyncOS on Cisco Email Security Appliance (ESA) devices 8.5 and earlier allows remote attackers to bypass intended content restrictions via…
–
CVSS
1.2%
EPSS
No
On KEV
Description
The uuencode inspection engine in Cisco AsyncOS on Cisco Email Security Appliance (ESA) devices 8.5 and earlier allows remote attackers to bypass intended content restrictions via a crafted e-mail attachment with uuencode encoding, aka Bug ID CSCzv54343.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
Asyncos · Cisco
through 8.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-0605
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-0605
secunia.com
http://secunia.com/advisories/62829
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0605
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=37384
www.securityfocus.com
http://www.securityfocus.com/bid/72528
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/100695
More from Asyncos
10.0
CVE-2025-20393
Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability
9.8
CVE-2026-76519
Cisco Secure Email Gateway Arbitrary File Write Vulnerability
9.8
CVE-2026-76461
Cisco Secure Email Gateway SQL Injection Vulnerability
8.8
CVE-2022-20871
A vulnerability in the web management interface of Cisco AsyncOS for Cisco Secure Web Appliance, formerly Cisco Web Security Appliance (WSA), could allow an…
8.8
CVE-2022-20868
A vulnerability in the web-based management interface of Cisco Email Security Appliance, Cisco Secure Email and Web Manager and Cisco Secure Web Appliance could allow an…