Kwetsbaarheid verholpen in Cisco Secure Email Gateway

Cisco has patched a critical vulnerability in Cisco Secure Email Gateway affecting AsyncOS Software. The flaw stems from insufficient validation of incoming email messages, allowing an unauthenticated attacker to send specially crafted emails containing malicious SQL instructions. Successful exploitation can lead to arbitrary SQL execution and ultimately remote code execution with root privileges on the underlying operating system. Cisco has confirmed active exploitation of this vulnerability in the wild. The attack vector requires no authentication, making it particularly dangerous for internet-facing email gateways. NCSC urgently recommends applying the security update immediately and inspecting affected systems for indicators of compromise. Organizations should consult Cisco's advisory for specific IoCs and additional remediation guidance.