CVE Vulnerability Advisory Database

[Affected Scope] Management interfaces of PA-Series, VM-Series firewalls, and Panorama (Virtual and M-Series) running PAN-OS

[Impact] An authenticated attacker with network access can execute arbitrary code with root privileges, leading to full system compromise

[Mitigation] Apply the latest security patches immediately and restrict management interface access to trusted internal IP addresses only

[Affected Scope] Cisco Secure Email Gateway and Cisco Secure Email and Web Manager running Cisco AsyncOS Software with the Spam Quarantine feature enabled

[Impact] Unauthenticated, remote attackers can execute arbitrary system commands with root privileges on the underlying operating system

[Mitigation] Apply official Cisco security patches immediately, or restrict/disable external access to the Spam Quarantine feature as a temporary workaround

[Affected Scope] Specific API endpoints of Cisco Identity Services Engine (ISE) and Cisco ISE-PIC

[Impact] An unauthenticated, remote attacker can execute arbitrary code with root privileges on the underlying operating system by sending a crafted API request

[Mitigation] Immediately apply the official security patches provided by Cisco and restrict access to the management API ports

[Affected Scope] Cisco Secure Access Control System (ACS) prior to release 5.8 Patch 9

[Impact] An unauthenticated, remote attacker can execute arbitrary commands on the affected device with root privileges by sending a crafted serialized Java object

[Mitigation] Immediately upgrade to Cisco ACS 5.8 Patch 9 or later, or restrict network access to vulnerable ports