Skip to content
fr Sign in
6.0 Medium

CVE-2023-20075 Vulnerability in the CLI of Cisco Secure Email Gateway could allow an authenticated, remote attacker to execute…

Description

Vulnerability in the CLI of Cisco Secure Email Gateway could allow an authenticated, remote attacker to execute arbitrary commands. These vulnerability is due to improper input validation in the CLI. An attacker could exploit this vulnerability by injecting operating system commands into a legitimate command. A successful exploit could allow the attacker to escape the restricted command prompt and execute arbitrary commands on the underlying operating system. To successfully exploit this vulnerability, an attacker would need valid Administrator credentials.

Affected products and versions

Product Affected versions Fixed in
Cisco Secure Email 14.2.0-620 No fix stated
Cisco Secure Email 14.0.0-698 No fix stated
Cisco Secure Email 13.5.1-277 No fix stated
Cisco Secure Email 13.0.0-392 No fix stated
Cisco Secure Email 12.5.0-066 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Secure Email

The 29 CVEs of Cisco Secure Email →
CVE-2026-76519 Cisco Secure Email Gateway Relative Path Traversal Vulnerability 9.8 Critical CVE-2026-76442 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and… 7.5 High CVE-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability 9.8 Critical CVE-2026-76443 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and… 9.8 Critical
Track this CVE