748 matches found
CYBERDUDEBIVASH-Cisco-AsyncOS-CVE-2025-20393-Scanner
CYBERDUDEBIVASH Cisco AsyncOS CVE-2025-20393 スキャナー Copyright © 2026 CYBERDUDEBIVASH ECOSYSTEM – All Rights Reserved CYBERDUDEBIVASH AUTHORITY の下で認定 – CVE-2025-20393（Cisco Secure Email Gateway / SMA における認証なし RCE）のための倫理的検出ツールです。 このツールは、オープンな TCP/6025 ポート、応答する Spam Quarantine インターフェース、および既知の侵害後 IOC...
Blackash-CVE-2025-20393
🛡️ CVE-2025-20393 – Vulnerabilidad crítica en Cisco AsyncOS 🔍 Descripción general CVE‑2025‑20393 es una vulnerabilidad crítica de ejecución remota de código RCE en el software Cisco AsyncOS , que afecta a: Cisco Secure Email Gateway físico y virtual Cisco Secure Email and Web Manager físico y...
cisco-CVE-2023-20075
概要 セキュリティ研究者: ly1g3, ly1g3attuta.io GPGフィンガープリント: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 概要: ローカル権限昇格とシェルエスケープ CVE: CVE-2023-20075 タイムライン: 発見 - ly1g3 報告 - ly1g3 修正 - Cisco Cisco AsyncOS 14.2.0 ESA Cisco Secure Email 権限昇格 - cliからrootシェルへ...
cisco-CVE-2023-20009
概要 セキュリティ研究者: ly1g3, ly1g3attuta.io GPGフィンガープリント: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 概要: リモートコード実行 - 設定ファイルからのRCE CVE: CVE-2023-20009 タイムライン: 発見 - ly1g3 報告 - ly1g3 修正 - Cisco Cisco AsyncOS 14.2.0 ESA（Cisco Secure Email）およびCisco Secure Email and...
The vulnerability of the Cisco AsyncOS operating system authentication service for Cisco Secure Web Appliances allows a hacker to bypass the authentication process.
The vulnerability of the Cisco AsyncOS operating system authentication service for Cisco Secure Web Appliances is related to authentication errors. Exploiting this vulnerability could allow a malicious actor to bypass the authentication process and gain unauthorized access to protected informatio...
CVE-2026-20152
A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authentication policy requirements. This vulnerability is due to improper validation of user-supplied authentication input in HT...
EUVD-2026-22964
A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authentication policy requirements. This vulnerability is due to improper validation of user-supplied authentication input in HT...
CVE-2026-20152
A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authentication policy requirements. This vulnerability is due to improper validation of user-supplied authentication input in HT...
PT-2026-33089
A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authentication policy requirements. This vulnerability is due to improper validation of user-supplied authentication input in HT...
PT-2026-6079
Name of the Vulnerable Software and Affected Versions Cisco AsyncOS Software for Cisco Secure Web Appliance affected versions not specified Description A flaw in the Dynamic Vectoring and Streaming DVS Engine implementation may allow a remote, unauthenticated attacker to circumvent the anti-malwa...
Cisco Patches Zero-Day RCE Exploited by China-Linked APT in Secure Email Gateways
Cisco on Thursday released security updates for a maximum-severity security flaw impacting Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager, nearly a month after the company disclosed that it had been exploited as a zero-day by a China-nexus advanced...
The vulnerability of the Spam Quarantine function in the Cisco AsyncOS operating system, within the tools of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, allows a malicious user to execute arbitrary code with root privileges.
The vulnerability of the Spam Quarantine function in the Cisco AsyncOS operating system, as well as in products like Cisco Secure Email and Web Manager, and Cisco Secure Email Gateway, is related to deficiencies in the mechanism for verifying input data. Exploiting this vulnerability could allow ...
Cisco Warns of Active Attacks Exploiting Unpatched 0-Day in AsyncOS Email Security Appliances
Cisco has alerted users to a maximum-severity zero-day flaw in Cisco AsyncOS software that has been actively exploited by a China-nexus advanced persistent threat APT actor codenamed UAT-9686 in attacks targeting Cisco Secure Email Gateway and Cisco Secure Email and Web Manager. The networking...
Vulnerability in Cisco AsyncOS
Cisco has a vulnerability in Cisco AsyncOS. The vulnerability is in devices using Cisco AsyncOS software in conjunction with Cisco Secure Email Gateway and Cisco Secure Email and Web Manager. Exploitation requires the service to be accessible from the Internet and the Spam Quarantine feature to b...
CVE-2025-20393
A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to execute arbitrary system commands on an affected device with root privileges. This vulnerability is due...
UAT-9686 actively targets Cisco Secure Email Gateway and Secure Email and Web Manager
Cisco Talos recently discovered a campaign targeting Cisco AsyncOS Software for Cisco Secure Email Gateway, formerly known as Cisco Email Security Appliance ESA, and Cisco Secure Email and Web Manager, formerly known as Cisco Content Security Management Appliance SMA. We assess with moderate...
CVE-2025-20393
A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to execute arbitrary system commands on an affected device with root privileges. This vulnerability is due...
Cisco Multiple Products Improper Input Validation Vulnerability
Cisco Secure Email Gateway, Secure Email, AsyncOS Software, and Web Manager appliances contains an improper input validation vulnerability that allows threat actors to execute arbitrary commands with root privileges on the underlying operating system of an affected appliance...
VulnCheck KEV: CVE-2025-20393
A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to execute arbitrary system commands on an affected device with root privileges. This vulnerability is due...