WID-SEC-W-2023-0399

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Cisco AsyncOS: Mehrere Schwachstellen

view advisory published 2023-02-15

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Cisco Email Security Appliance und Cisco AsyncOS ausnutzen, um seine Privilegien zu erhöhen und beliebige Befehle auszuführen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2023-20075USmedium6.7Exploit
Vulnerability in the CLI of Cisco Secure Email Gateway could allow an authenticated, remote attacker to execute arbitrary commands. These vulnerability is due to improper input…
CVE-2023-20009UShigh7.2Exploit
A vulnerability in the Web UI and administrative CLI of the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and Web Manager (SMA) could allow an authenticated remote attack…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan