Cisco Identifies Critical Vulnerability in Secure Email Gateway Exploited by Attackers

Cisco has identified a critical vulnerability in its Secure Email Gateway that allows attackers to write files to the appliance's OS without authentication. Exploitation enables root command execution via a crafted email attachment.

Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance's operating system, Cisco said in an advisory on Wednesday.

The attacker sends an email with a crafted attachment through the gateway and, if it succeeds, could then run commands as root. The appliance filters an organization's email for spam, malware,

Read original article