Cisco AsyncOS Security Restriction Bypass Vulnerability

Release Date: 21 Feb 2025

RISK: Medium Risk

TYPE: Security software and application - Security Software & Appliance

A vulnerability was identified in Cisco AsyncOS. A remote attacker could exploit this vulnerability to trigger security restriction bypass on the targeted system.

---

Impact

• Security Restriction Bypass

---

System / Technologies affected

• Cisco AsyncOS Software for Secure Email Gateway versions prior to 14.2
• Cisco AsyncOS Software for Secure Email Gateway versions prior to 15.0
• Cisco AsyncOS Software for Secure Email Gateway versions prior to 16.0

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-mailpol-bypass-5nVcJZMw

---

Vulnerability Identifier

• CVE-2025-20153

---

Source

• Cisco

---

Related Link

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-mailpol-bypass-5nVcJZMw