Cisco Warns of Active Attacks Exploiting Critical Secure Email Gateway Flaw

Cisco disclosed that attackers are actively exploiting a critical vulnerability in its Secure Email Gateway appliance that lets an unauthenticated sender write files to the device. A specially crafted email attachment can be used to run commands with root privileges, the company said, urging customers to patch immediately. The flaw adds to a run of actively exploited edge-device bugs disclosed this month across Citrix, Fortinet, and Ivanti products.

Photo: Travis Wise via Wikimedia Commons (CC BY 2.0).