cveboard RSS feed

CVE-2023-20075

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2023
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Vulnerability in the CLI of Cisco Secure Email Gateway could allow an authenticated, remote attacker to execute arbitrary commands. These vulnerability is due to improper input validation in the CLI. An attacker could exploit this vulnerability by injecting operating system commands into a legitimate command. A successful exploit could allow the attacker to escape the restricted command prompt and execute arbitrary commands on the underlying operating system. To successfully exploit this vulnerability, an attacker would need valid Administrator credentials.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Cisco Secure Email

Vendor
Cisco
Product
Cisco Secure Email
Platforms
Unknown
Default status
Unknown
Cisco Secure Email · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
13.0.0-392affectedUnavailableUnavailableUnavailableNone listed
13.5.1-277affectedUnavailableUnavailableUnavailableNone listed
12.5.0-066affectedUnavailableUnavailableUnavailableNone listed
14.0.0-698affectedUnavailableUnavailableUnavailableNone listed
14.2.0-620affectedUnavailableUnavailableUnavailableNone listed