Skip to content
OpenAdvisories
Medium WID-SEC-2025-0276 5 CVEs

Cisco AsyncOS, Secure Email Gateway und Secure Web Appliance: Mehrere Schwachstellen

Published Feb 5, 2025 · Updated Feb 5, 2025 · de-DE

Vendor: Cisco Product: AsyncOS Product: Secure Email Gateway Product: Secure Web Appliance

Summary

Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Cisco AsyncOS, Cisco Secure Email Gateway und Cisco Secure Web Appliance ausnutzen, um beliebigen Code mit Administratorrechten auszuführen, Root-Rechte zu erlangen, vertrauliche Informationen preiszugeben, Sicherheitsmaßnahmen zu umgehen und einen Cross-Site-Scripting-Angriff durchzuführen.

Product

Cisco AsyncOS ist ein Betriebssystem für Cisco Appliances.
Das Cisco Secure Email Gateway ist eine Sicherheitslösung zum Schutz der E-Mail Kommunikation.
Cisco Secure Web Appliance (ehem. Cisco Web Security) bietet einen on-premise Web Proxy mit Schutz vor vielen Bedrohungen.

Vulnerabilities 5

  • Medium 6.5
    CVE-2025-20184

    Cisco Secure Email and Web Manager and Secure Web Appliance Command Injection Vulnerability

    A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Web Appliance could allow an authenticated, remote attacker to perform command injection attacks against an affected device. The at…

    Cisco Cisco Secure Email Cisco Secure Web Appliance Network devices
  • Medium 5.8
    CVE-2025-20183

    Cisco Secure Web Appliance Range Request Bypass Vulnerability

    A vulnerability in a policy-based Cisco Application Visibility and Control (AVC) implementation of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to evade the antivirus scanner and download a malicious fi…

    Cisco Cisco Secure Web Appliance Network devices
  • Medium 4.8
    CVE-2025-20180

    Cisco Secure Email and Web Manager and Secure Email Gateway Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Email Gateway could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user …

    Cisco Cisco Secure Email Cisco Secure Email and Web Manager Network devices
  • Medium 4.3
    CVE-2025-20207

    Cisco Secure Email Gateway, Cisco Secure Email and Web Appliance and Cisco Secure Web Appliance SNMP Polling Information Disclosure Vulnerability

    A vulnerability in Simple Network Management Protocol (SNMP) polling for Cisco Secure Email and Web Manager, Cisco Secure Email Gateway, and Cisco Secure Web Appliance could allow an authenticated, remote attacker to obtain confidential information about the …

    Cisco Cisco Secure Email Cisco Secure Email and Web Manager Cisco Secure Web Appliance Network devices
  • Low 3.4
    CVE-2025-20185

    Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Privilege Escalation Vulnerability

    A vulnerability in the implementation of the remote access functionality of Cisco AsyncOS Software for Cisco Secure Email and Web Manager, Cisco Secure Email Gateway, and Cisco Secure Web Appliance could allow an authenticated, local attacker to elevate privi…

    Cisco Cisco Secure Email Cisco Secure Email and Web Manager Cisco Secure Web Appliance Network devices

Revision history

  1. #1

    Initiale Fassung

References