Key Takeaways:
- Cisco has released security updates to fix an email security flaw that attackers are already exploiting.
- The flaw lets remote attackers run system commands with the highest level of access, even without logging in.
- Administrators should install the updates immediately to protect their systems.
Cisco issued software updates to fix a critical Cisco Zero-Day Vulnerability, tracked as CVE-2025-20182, in its Secure Email Gateway appliances. The flaw received a severity score of 9.8 out of 10, placing it near the highest level of risk.
Security researchers confirmed that attackers had used the flaw in targeted attacks before Cisco released a fix.
The flaw lets attackers send harmful network requests to vulnerable devices without logging in. If the attack succeeds, they can gain full control of the system and run commands with root privileges. Cisco urged administrators to check their devices and install the security updates as soon as possible.
Administrators using affected versions of Secure Email Gateway must update their software to protect their networks. Cisco said there are no temporary fixes or other workarounds that can block these attacks. Devices without the update remain at risk of being taken over by attackers.
Security Flaw Gives Attackers Full System Access
The flaw stems from the system’s failure to properly check data sent to its management interface. Attackers can send specially crafted HTTP requests to affected devices without valid login details. This can give them control over key parts of the device’s operating system.
With root access, attackers can change system settings, view email traffic, or run harmful scripts. They may also use a compromised gateway to reach other systems within a company’s network. Security teams should limit access to management interfaces so that untrusted users cannot reach them.
The Cisco Zero-Day Vulnerability highlights how zero-day flaws in devices that protect a network’s edge can pose serious risks to businesses. Email gateways handle incoming and outgoing messages, so a breach could expose sensitive company information. Organizations should review system logs for signs of suspicious activity.
Security Agencies Track Growing Cyber Risks
The US Cybersecurity and Infrastructure Security Agency (CISA) added the flaw to its Known Exploited Vulnerabilities catalog after Cisco published its security notice. US federal agencies must follow set deadlines to fix listed flaws. Security experts expect more attackers to scan for vulnerable devices as details about the flaw spread.
Cisco has fixed other Cisco Zero-Day Vulnerability flaws in its enterprise networking products in recent months. Attackers often target firewalls and secure email gateways because these devices may not run the same security tools used to monitor computers and servers. Regular monitoring and fast software updates remain important for protecting business networks.
Security teams worldwide are checking network logs for signs that attackers may have used the flaw. Cisco advises customers to read its official security notices for the affected versions, fixed releases, and update instructions. Installing the right updates can help prevent attackers from running commands on vulnerable email gateways.
Visit more of our news! CyberPro Magazine
