Medium severity4.3NVD Advisory· Published Nov 26, 2019· Updated Jun 17, 2026

CVE-2019-15971

Description

A vulnerability in the MP3 detection engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured content filters on the device. The vulnerability is due to improper validation of certain MP3 file types. An attacker could exploit this vulnerability by sending a crafted MP3 file through the targeted device. A successful exploit could allow the attacker to bypass configured content filters that would normally drop the email.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Email Security Appliance Firmware2 versions
cpe:2.3:o:cisco:email_security_appliance_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:cisco:email_security_appliance_firmware:*:*:*:*:*:*:*:*range: <13.0
- (no CPE)range: unspecified
Cisco Systems, Inc./Email Security Appliancellm-fuzzy
Cisco Systems, Inc./AsyncOS Softwarellm-fuzzy

Patches

Vulnerability mechanics

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191120-esa-mp3-bypassnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000