Remote Command Execution Vulnerability in Cisco Secure Email Gateway

CVE-2023-20075

Summary

A vulnerability exists in the command-line interface (CLI) of Cisco Secure Email Gateway due to improper input validation. This security flaw allows authenticated, remote attackers to inject malicious operating system commands into legitimate commands. A successful exploitation of this vulnerability could lead an attacker to escape from the restricted command prompt, gaining the ability to execute arbitrary commands on the underlying operating system. To exploit this vulnerability, the attacker would require valid Administrator credentials.

References