مستوى الخطورة: Critical
العنوان:
Security Updates – Cisco Products
الوقت:
Monday July 22, 2024
ملخص:
This vulnerability is due to improper handling of email attachments when file analysis and content filters are enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device.
A successful exploit could allow the attacker to replace any file on the underlying file system. The attacker could then perform any of the following actions: add users with root privileges, modify the device configuration, execute arbitrary code, or cause a permanent denial of service (DoS) condition on the affected device.
الأنظمة المتأثرة:
.png)
This vulnerability affects Cisco Secure Email Gateway if it is running a vulnerable release of Cisco AsyncOS and both of the following conditions are met:
o Either the file analysis feature, which is part of Cisco Advanced Malware Protection (AMP), or the content filter feature is enabled and assigned to an incoming mail policy
o The Content Scanner Tools version is earlier than 23.3.0.4823
Fixed Version:
• Content Scanner Tools version 23.3.0.4823 and later.
التوصيات:
applying the security updates recently released by Cisco
المراجع
للاطلاع على المراجع , أنقر هنا