cisco-sa-esa-priv-esc-ssti-xNO2EOGZ: Cisco Secure Email Gateway Server-Side Template Injection Vulnerability
A vulnerability in the web-based management interface of Cisco AsyncOS for Secure Email Gateway could allow an authenticated, remote attacker to execute arbitrary system commands on an affected device.This vulnerability is due to insufficient input validation in certain portions of
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-esa-priv-esc-ssti-xNO2EOGZ?
The severity of cisco-sa-esa-priv-esc-ssti-xNO2EOGZ is considered critical due to the potential for remote code execution.
How do I fix cisco-sa-esa-priv-esc-ssti-xNO2EOGZ?
To fix cisco-sa-esa-priv-esc-ssti-xNO2EOGZ, upgrade to the latest version of Cisco AsyncOS for Secure Email Gateway as recommended in the advisory.
Who is affected by cisco-sa-esa-priv-esc-ssti-xNO2EOGZ?
Any organization using vulnerable versions of Cisco AsyncOS for Secure Email Gateway is affected by cisco-sa-esa-priv-esc-ssti-xNO2EOGZ.
What type of attack does cisco-sa-esa-priv-esc-ssti-xNO2EOGZ enable?
cisco-sa-esa-priv-esc-ssti-xNO2EOGZ enables authenticated, remote attackers to execute arbitrary system commands on the affected device.
Is there a workaround for cisco-sa-esa-priv-esc-ssti-xNO2EOGZ?
There are no known workarounds for cisco-sa-esa-priv-esc-ssti-xNO2EOGZ, and the only mitigation is to apply the recommended software update.