Cisco patches new Secure Email Gateway zero-day exploited in attacks
Cisco said attackers can send malicious attachments through unpatched devices, and Shadowserver tracks nearly 300 exposed hosts online.
5 Articles
5 Articles
BleepingComputer
IT Security News - cybersecurity, infosecurity newsCisco patches new Secure Email Gateway zero-day exploited in attacks
Cisco has patched another actively exploited zero-day flaw in its Secure Email Gateway (SEG) that lets remote unauthenticated attackers execute commands with root privileges. [...]
A critical vulnerability in Cisco Secure Email Gateway allows a remote attacker, unauthenticated, to execute commands with administrator privileges after sending an email with a malicious attachment. Cisco and the US CISA agency warned that the bug is already exploded as a zero day and recommended updating as soon as possible.
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability
Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance's operating system, Cisco said in an advisory on Wednesday. The attacker sends an email with a crafted attachment through the gateway and, if it succeeds, could then run commands as root. The
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
