cisco-CVE-2023-20009

소개 보안 연구원: ly1g3, ly1g3attuta.io GPG 지문: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 개요: 원격 코드 실행 - 설정 파일로부터의 RCE CVE: CVE-2023-20009 타임라인: 발견 - ly1g3 보고 - ly1g3 수정 - Cisco Cisco AsyncOS 14.2.0 ESA Cisco Secure Email 및 Cisco Secure Email and Web Manager...

Cisco Secure Email Gateway Malware Detection Evasion

This report is being published within a coordinated disclosure procedure. The researcher has been in contact with the vendor but not received a satisfactory response within a given time frame. As the attack complexity is low and exploits have already been published by a third party there must be ...