Our takeHKCERT warns of an unauthenticated RCE in Ivanti Connect Secure; Cisco separately warns that attackers are already exploiting a similar flaw in its Secure Email Gateway. Patch both now if you run them.Security Resilience desk
Sources (3)
- hkcert · hkcert
- hkcert · hkcert
- securityweek · securityweek
What this means for you — Security leader:Cisco has confirmed active exploitation of a zero-day in Secure Email Gateway that lets unauthenticated remote attackers write arbitrary files and gain root. Patch immediately if you run it.
What this means for you — Lean IT orgs:Cisco issued an update for a serious remote code execution flaw in its Secure Email Gateway that's already being exploited. Apply the patch as soon as possible if you use this product.
What this means for you — MSP:Cisco disclosed an exploited zero-day in Secure Email Gateway allowing unauthenticated file writes leading to root. Check every client running it and deploy the patch immediately.
What this means for you — Researcher:Cisco advisory confirms in-the-wild exploitation of an unauthenticated RCE in Secure Email Gateway that achieves root via arbitrary file writes. Patch deployed.