CVE-2025-20393

CVE-2025-20393 📌 概要 CVE-2025-20393 は、Cisco AsyncOS を実行している Cisco Secure Email Gateway SEG および Cisco Secure Email and Web Manager SEWM アプライアンスに影響を与える 重大なリモートコマンド実行 RCE の脆弱性です。 この脆弱性は、Spam Quarantine 機能における不適切な入力検証 が原因で存在します。認証されていないリモート攻撃者 は、細工された HTTP リクエストを送信することでこの欠陥を悪用し、root 権限での任意のコマンド実行...

CYBERDUDEBIVASH-Cisco-AsyncOS-CVE-2025-20393-Scanner

CYBERDUDEBIVASH Cisco AsyncOS CVE-2025-20393 スキャナー Copyright © 2026 CYBERDUDEBIVASH ECOSYSTEM – All Rights Reserved CYBERDUDEBIVASH AUTHORITY の下で認定 – CVE-2025-20393（Cisco Secure Email Gateway / SMA における認証なし RCE）のための倫理的検出ツールです。 このツールは、オープンな TCP/6025 ポート、応答する Spam Quarantine インターフェース、および既知の侵害後 IOC...

Blackash-CVE-2025-20393

🛡️ CVE-2025-20393 – 重大なCisco AsyncOS脆弱性 🔍 概要 CVE‑2025‑20393 は、Cisco AsyncOS Software における重大なリモートコード実行（RCE）脆弱性 であり、以下に影響します： Cisco Secure Email Gateway （物理および仮想） Cisco Secure Email and Web Manager （物理および仮想） ⚠️ Spam隔離機能が有効かつ外部に公開されている システムのみが影響を受けます。 深刻度： 重大（CVSS 3.1：10.0 / 最大） 弱点： 不適切な入力検証（CWE-20 ）...

Cisco Secure Email and Web Manager RCE (cisco-sa-sma-attack-N9bf4)

According to its self-reported version, Cisco Secure Email and Web Manager is affected by a vulnerability. - A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attack...

Cisco Patches Zero-Day RCE Exploited by China-Linked APT in Secure Email Gateways

Cisco on Thursday released security updates for a maximum-severity security flaw impacting Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager, nearly a month after the company disclosed that it had been exploited as a zero-day by a China-nexus advanced...

Cisco Secure Email Gateway RCE (cisco-sa-sma-attack-N9bf4)

According to its self-reported version, Cisco Secure Email Gateway is affected by a remote code execution vulnerability. - A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could allow an unauthenticated,...

The vulnerability of the Spam Quarantine function in the Cisco AsyncOS operating system, within the tools of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, allows a malicious user to execute arbitrary code with root privileges.

The vulnerability of the Spam Quarantine function in the Cisco AsyncOS operating system, as well as in products like Cisco Secure Email and Web Manager, and Cisco Secure Email Gateway, is related to deficiencies in the mechanism for verifying input data. Exploiting this vulnerability could allow ...

Cisco Warns of Active Attacks Exploiting Unpatched 0-Day in AsyncOS Email Security Appliances

Cisco has alerted users to a maximum-severity zero-day flaw in Cisco AsyncOS software that has been actively exploited by a China-nexus advanced persistent threat APT actor codenamed UAT-9686 in attacks targeting Cisco Secure Email Gateway and Cisco Secure Email and Web Manager. The networking...

Vulnerability in Cisco AsyncOS

Cisco has a vulnerability in Cisco AsyncOS. The vulnerability is in devices using Cisco AsyncOS software in conjunction with Cisco Secure Email Gateway and Cisco Secure Email and Web Manager. Exploitation requires the service to be accessible from the Internet and the Spam Quarantine feature to b...

CVE-2025-20393

A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to execute arbitrary system commands on an affected device with root privileges. This vulnerability is due...

CVE-2025-20393

A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to execute arbitrary system commands on an affected device with root privileges. This vulnerability is due...

CVE-2025-20393: Improper Input Validation

A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to execute arbitrary system commands on an affected device with root privileges. This vulnerability is due...

VulnCheck KEV: CVE-2025-20393

Cisco Secure Email Gateway, Secure Email, AsyncOS Software, and Web Manager appliances contains an improper input validation vulnerability that allows threat actors to execute arbitrary commands with root privileges on the underlying operating system of an affected appliance...

EUVD-2007-3780

Malware in sbrugna...

EUVD-2015-4345

Malware in sbrugna...

EUVD-2008-2824

Malware in sbrugna...

EUVD-2013-3321

Malware in sbrugna...

EUVD-2018-0963

Malware in sbrugna...

EUVD-2021-7028

Malicious code in bioql PyPI...

CVE-2013-3386

The IronPort Spam Quarantine ISQ component in the web framework in IronPort AsyncOS on Cisco Email Security Appliance devices before 7.1.5-106 and 7.3, 7.5, and 7.6 before 7.6.3-019 and Content Security Management Appliance devices before 7.9.1-102 and 8.0 before 8.0.0-404 allows remote attackers...