Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6rc3-jwq8-jm3v

Опубликовано: 14 окт. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.

This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with root privileges on the underlying operating system.

A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.

This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with root privileges on the underlying operating system.

EPSS

Процентиль: 94%
0.06227
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-23

Связанные уязвимости

CVSS3: 9.8
nvd
25 дней назад

A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with root privileges on the underlying operating system.

CVSS3: 9.8
fstec
26 дней назад

Уязвимость модуля Advanced Malware Protection (AMP) средства защиты Cisco Secure Email Gateway, позволяющая нарушителю получить доступ на запись произвольных файлов и выполнить произвольные команды с правами root

EPSS

Процентиль: 94%
0.06227
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-23