Cisco make-me-root email bug exploited as a 0-day by unknown crims

Cisco has warned of an active exploit of a critical vulnerability in its email security appliances, which allows attackers to gain root access. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has also issued an alert.

The bug, tracked as CVE-2022-20893, affects Cisco's Email Security Appliance (ESA) and Web Security Appliance (WSA) products. It allows an unauthenticated, remote attacker to execute arbitrary commands with root privileges.