CVE-2025-20393

Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability

State: Published
Severity: 10.0 Critical
Published: Dec 17, 2025
Updated: Oct 7, 2026
Reserved: Oct 10, 2024

Description

A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to execute arbitrary system commands on an affected device with root privileges.

This vulnerability is due to insufficient validation of HTTP requests by the Spam Quarantine feature. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges.

Scores

CVSS	Score	Vector	Source
3.1	10.0 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H	cisco

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
Cisco Secure EmailCisco	14.0.0-698Affected 13.5.1-277Affected 13.0.0-392Affected 14.2.0-620Affected 13.0.5-007Affected 13.5.4-038Affected 14.2.1-020Affected 14.3.0-032Affected 15.0.0-104Affected 15.0.1-030Affected 15.5.0-048Affected 15.5.1-055Affected 15.5.2-018Affected 16.0.0-050Affected 15.0.3-002Affected 16.0.0-054Affected 15.5.3-022Affected 16.0.1-017Affected
Cisco Secure Email and Web ManagerCisco	13.6.2-023Affected 13.6.2-078Affected 13.0.0-249Affected 13.0.0-277Affected 13.8.1-052Affected 13.8.1-068Affected 13.8.1-074Affected 14.0.0-404Affected 12.8.1-002Affected 14.1.0-227Affected 13.6.1-201Affected 14.2.0-203Affected 14.2.0-212Affected 12.8.1-021Affected 13.8.1-108Affected 14.2.0-224Affected 14.3.0-120Affected 15.0.0-334Affected 15.5.1-024Affected 15.5.1-029Affected 15.5.2-005Affected 16.0.0-195Affected 15.5.3-017Affected 16.0.1-010Affected 15.0.1-035Affected and 1 more version

Product

Versions

Cisco Secure EmailCisco

14.0.0-698Affected
13.5.1-277Affected
13.0.0-392Affected
14.2.0-620Affected
13.0.5-007Affected
13.5.4-038Affected
14.2.1-020Affected
14.3.0-032Affected
15.0.0-104Affected
15.0.1-030Affected
15.5.0-048Affected
15.5.1-055Affected
15.5.2-018Affected
16.0.0-050Affected
15.0.3-002Affected
16.0.0-054Affected
15.5.3-022Affected
16.0.1-017Affected

Cisco Secure Email and Web ManagerCisco

13.6.2-023Affected
13.6.2-078Affected
13.0.0-249Affected
13.0.0-277Affected
13.8.1-052Affected
13.8.1-068Affected
13.8.1-074Affected
14.0.0-404Affected
12.8.1-002Affected
14.1.0-227Affected
13.6.1-201Affected
14.2.0-203Affected
14.2.0-212Affected
12.8.1-021Affected
13.8.1-108Affected
14.2.0-224Affected
14.3.0-120Affected
15.0.0-334Affected
15.5.1-024Affected
15.5.1-029Affected
15.5.2-005Affected
16.0.0-195Affected
15.5.3-017Affected
16.0.1-010Affected
15.0.1-035Affected
and 1 more version

References

cisco-sa-sma-attack-N9bf4
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-20393government-resource

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.