Our takeCisco patched an actively exploited zero-day in Secure Email Gateway that lets unauthenticated attackers run root commands via a crafted email attachment. Patch immediately if you run it yourself.Security Resilience desk
Sources (3)
- bleeping · bleeping
- hackernews · hackernews
- cert_eu · cert_eu
What this means for you — Security leader:Patch Cisco Secure Email Gateway immediately if you run it on-prem; the zero-day (root command execution via crafted email attachment) is under active exploitation.
What this means for you — Lean IT orgs:If you run Cisco Secure Email Gateway yourself, apply the patch today — attackers are already using this flaw to run commands as root by sending specially crafted emails.
What this means for you — MSP:Check every client running on-prem Cisco Secure Email Gateway and push the patch now; this actively exploited root-execution zero-day via crafted email attachments affects the filtering appliances you manage.
What this means for you — Researcher:Cisco has released patches and an advisory for an actively exploited zero-day in Secure Email Gateway that permits unauthenticated root command execution via crafted email attachments.