Cisco Warns of Active Exploitation of Critical Vulnerability in Secure Email Gateway

Cisco has issued an advisory warning of active attacks targeting a critical vulnerability in its Secure Email Gateway appliance. According to the advisory, the vulnerability allows a sender with no login credentials to write files to the underlying operating system. An attacker can exploit this by sending a crafted email with a malicious attachment through the gateway. If the attack succeeds, the threat actor could run commands as root on the appliance.

The Secure Email Gateway is designed to filter an organization's email traffic for spam and malware. The exploitation of this flaw could lead to full compromise of the appliance, enabling lateral movement into the organization's network and exfiltration of sensitive email data. Cisco has released security updates to address the flaw, and the company urges administrators to apply the latest firmware or software patches as soon as possible. Until patches are applied, Cisco recommends network segmentation to limit exposure.

The advisory highlights that the vulnerability is being actively exploited in the wild, marking it as a high-priority issue for affected organizations.