Cisco has confirmed that attackers are actively exploiting a critical, unauthenticated vulnerability in its Secure Email Gateway appliance. The flaw lets an attacker send a booby-trapped email attachment that writes files onto the device's operating system, potentially enabling root-level command execution. Because the gateway sits in front of an organization's inbound mail, a successful attack could hand intruders a foothold deep inside the network.
// source: thehackernews.com ↗