Asyncos vulnerabilities
10 known vulnerabilities in Asyncos from Cisco. 10 are rated high or critical, and 3 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
Cisco Secure Email Gateway Relative Path Traversal Exploited
A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email
- 9.8 Critical severity
Cisco Secure Email Gateway SQL Injection Exploited
A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to in
- 10.0 Critical severity
Cisco Multiple Products Improper Input Validation Exploited
A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to execute arbitrary system commands on an affected device with root
- 7.2 High severity
Cisco Secure Email: Improper Neutralization of Special Elements used in a Command
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Web Appliance could allow an authenticated, remote attacker to perform command injection attacks against an affected device. The att
- 8.8 High severity
Cisco Secure Web Appliance: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the web management interface of Cisco AsyncOS for Cisco Secure Web Appliance, formerly Cisco Web Security Appliance (WSA), could allow an authenticated, remote attacker to perform a command injection and elevate privilege
- 7.8 High severity
Cisco Secure Web Appliance: Execution with Unnecessary Privileges
A vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated, local attacker to execute arbitrary commands and elevate privileges to root. This vulnerability is due to insufficient validation of user-supplied input for the
- 7.2 High severity
Cisco Secure Email: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability in the web-based management interface of Cisco AsyncOS for Secure Email Gateway could allow an authenticated, remote attacker to execute arbitrary system commands on an affected device. This vulnerability is due to insufficient input validation
- 8.4 High severity
Cisco Secure Email and Web Manager: Improper Neutralization of Input During Web Page Generation
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface. This vulnerability is due to insuffic
- 8.8 High severity
Cisco Secure Web Appliance: Use of Hard-coded Credentials
A vulnerability in the web-based management interface of Cisco Email Security Appliance, Cisco Secure Email and Web Manager and Cisco Secure Web Appliance could allow an authenticated, remote attacker to elevate privileges on an affected system. The attacker n
- 7.5 High severity
A vulnerability in the DNS-based Authentication of Named Entities (DANE) email verification…
A vulnerability in the DNS-based Authentication of Named Entities (DANE) email verification component of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) conditio