CVE-2016-6406
CriticalSummary
On Cisco IronPort AsyncOS devices in versions 9.1.2-023, 9.1.2-028, 9.1.2-036, 9.7.2-046, 9.7.2-047, 9.7.2-054, 10.0.0-124, and 10.0.0-125, when Enrollment Client before 1.0.2-065 is installed, remote attackers can obtain root access via a connection to the testing/debugging interface.
Risk Assessment
Gaining root access by remote attackers can lead to full control over the device, posing a serious threat to the organization's data security.
Recommendation
It is recommended to update the Enrollment Client to version 1.0.2-065 or later and to monitor access to the testing/debugging interface.
Original NVD description (English source)
Cisco IronPort AsyncOS 9.1.2-023, 9.1.2-028, 9.1.2-036, 9.7.2-046, 9.7.2-047, 9.7.2-054, 10.0.0-124, and 10.0.0-125 on Email Security Appliance (ESA) devices, when Enrollment Client before 1.0.2-065 is installed, allows remote attackers to obtain root access via a connection to the testing/debugging interface, aka Bug ID CSCvb26017.