{"id":"CVE-2025-20393","revision":"d420060c028743ee83376eaf443d4a3e","records":[{"revision":"d420060c028743ee83376eaf443d4a3e","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-20393","aliases":[],"title":"Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability","description":"A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to execute arbitrary system commands on an affected device with root privileges.\r\n\r\nThis vulnerability is due to insufficient validation of HTTP requests by the Spam Quarantine feature. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges.","state":0,"publishedAt":"2025-12-17T16:47:13.128+00:00","modifiedAt":"2026-10-07T19:22:07.139+00:00","affected":[{"ecosystem":"Vendor product","name":"Cisco Secure Email","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Cisco\",\n                    \"product\": \"Cisco Secure Email\",\n                    \"versions\": [\n                        {\n                            \"version\": \"14.0.0-698\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"13.5.1-277\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"13.0.0-392\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14.2.0-620\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"13.0.5-007\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"13.5.4-038\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14.2.1-020\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14.3.0-032\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15.0.0-104\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15.0.1-030\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15.5.0-048\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15.5.1-055\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15.5.2-018\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"16.0.0-050\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15.0.3-002\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"16.0.0-054\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15.5.3-022\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"16.0.1-017\",\n                            \"status\": \"affected\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unknown\"\n                }"},{"ecosystem":"Vendor product","name":"Cisco Secure Email and Web Manager","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Cisco\",\n                    \"product\": \"Cisco Secure Email and Web Manager\",\n                    \"versions\": [\n                        {\n                            \"version\": \"13.6.2-023\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"13.6.2-078\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"13.0.0-249\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"13.0.0-277\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"13.8.1-052\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"13.8.1-068\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"13.8.1-074\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14.0.0-404\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"12.8.1-002\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14.1.0-227\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"13.6.1-201\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14.2.0-203\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14.2.0-212\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"12.8.1-021\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"13.8.1-108\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14.2.0-224\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14.3.0-120\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15.0.0-334\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15.5.1-024\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15.5.1-029\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15.5.2-005\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"16.0.0-195\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15.5.3-017\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"16.0.1-010\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15.0.1-035\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"16.0.2-088\",\n                            \"status\": \"affected\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unknown\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","score":10,"severity":"CRITICAL"}],"references":["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sma-attack-N9bf4"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-20393","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-20393","identifiers":["CVE-2025-20393"]},"retained":false,"historicalAffected":[]}],"coverage":[]}