Cisco patches new Secure Email Gateway zero-day exploited in attacks
-
Cisco has released a patch for a new zero-day vulnerability in its Secure Email Gateway (SEG) that has been actively exploited in the wild. The flaw allows remote, unauthenticated attackers to execute commands with root privileges on affected appliances, making it a critical issue for any organization running the product.
According to the report, this is the latest in a series of exploited flaws targeting Cisco's email security appliances, and the company has confirmed that the vulnerability was used in real-world attacks before a fix was available.
Key points to note:
- The vulnerability affects Cisco Secure Email Gateway.
- Exploitation allows remote, unauthenticated command execution with root privileges.
- The flaw was exploited in the wild prior to patching.
- Cisco has released a patch to address the issue.
If your organization uses Cisco SEG, treat this as urgent. Apply the vendor's patch as soon as possible, and review your appliance logs for signs of unexpected command execution or unauthorized access. Given that the flaw requires no authentication and grants root-level access, the potential impact is severe.
Source: BleepingComputer
Is your organization running Cisco Secure Email Gateway, and have you already applied the patch?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login