Cisco AsyncOS 15.5.3-022
Approved changes feed: RSS · Atom
cpe:2.3:o:cisco:asyncos:15.5.3-022:*:*:*:*:*:*:*
part: o version: 15.5.3-022 update: *
| Vendor | Cisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5) |
|---|---|
| Product | Asyncos (5b71cf3b-7b07-58aa-b4e6-d36b4e568abd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-20184 |
vulnerable | 2026-06-08 07:08:46.472418 |
Cisco Secure Email and Web Manager and Secure Web Appliance Command Injection Vulnerability
MEDIUM (6.5)
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Web Appliance could allow an authenticated, remote attacker to perform command injection attacks against an affected device. The attacker must authenticate with valid administrator credentials.
This vulnerability is due to insufficient validation of XML configuration files by an affected device. An attacker could exploit this vulnerability by uploading a crafted XML configuration file. A successful exploit could allow the attacker to inject commands to the underlying operating system with root privileges.
Published: 2025-02-05T16:14:30.863Z
Updated: 2025-02-05T17:00:15.021Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.