According to the report, this is the latest in a series of exploited flaws targeting Cisco's email security appliances, and the company has confirmed that the vulnerability was used in real-world attacks before a fix was available.

Key points to note:

• The vulnerability affects Cisco Secure Email Gateway.
• Exploitation allows remote, unauthenticated command execution with root privileges.
• The flaw was exploited in the wild prior to patching.
• Cisco has released a patch to address the issue.

If your organization uses Cisco SEG, treat this as urgent. Apply the vendor's patch as soon as possible, and review your appliance logs for signs of unexpected command execution or unauthorized access. Given that the flaw requires no authentication and grants root-level access, the potential impact is severe.

Source: BleepingComputer

Is your organization running Cisco Secure Email Gateway, and have you already applied the patch?