Cisco has warned of active attacks exploiting a critical vulnerability in its Secure Email Gateway that allows unauthenticated attackers to write files to the system. By sending a specially crafted email attachment, attackers can potentially execute commands with root-level privileges. The flaw only affects gateways with the File Reputation service enabled and an outdated Content Scanner Tools package version.
Cisco discovered the vulnerability through internal security scanning and became aware of ongoing attacks in October. Fixed versions have been available since September 14 through AsyncOS updates and Content Scanner Tools version 25.3.0.5525 or later. Customers can verify their exposure by checking their mail policies and scanner version, with the quickest fix being the scanner update that requires no system restart. Cisco has already deployed patches to its managed Secure Email Cloud service and recommends checking for compromise indicators on all affected devices.
Source: Read the full story at The Hacker News
This summary was written with AI assistance from the linked source.
Send this to yourself, or to someone who should see it
Enter your email and we will send you a link to this article.
