Aller au contenu
en Se connecter
6.0 Moyenne

CVE-2023-20075 Vulnerability in the CLI of Cisco Secure Email Gateway could allow an authenticated, remote attacker to execute…

Description

Vulnerability in the CLI of Cisco Secure Email Gateway could allow an authenticated, remote attacker to execute arbitrary commands. These vulnerability is due to improper input validation in the CLI. An attacker could exploit this vulnerability by injecting operating system commands into a legitimate command. A successful exploit could allow the attacker to escape the restricted command prompt and execute arbitrary commands on the underlying operating system. To successfully exploit this vulnerability, an attacker would need valid Administrator credentials.

Produits et versions touchés

Produit Versions touchées Corrigé en
Cisco Secure Email 14.2.0-620 Pas de correctif indiqué
Cisco Secure Email 14.0.0-698 Pas de correctif indiqué
Cisco Secure Email 13.5.1-277 Pas de correctif indiqué
Cisco Secure Email 13.0.0-392 Pas de correctif indiqué
Cisco Secure Email 12.5.0-066 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Cisco Secure Email

Les 29 CVE de Cisco Secure Email →
CVE-2026-76519 Cisco Secure Email Gateway Relative Path Traversal Vulnerability 9.8 Critique CVE-2026-76442 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and… 7.5 Élevée CVE-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability 9.8 Critique CVE-2026-76443 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and… 9.8 Critique
Suivre cette CVE