CVE-2024-20401

A vulnerability in the content scanning and message filtering features of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to overwrite arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when file analysis and content filters are enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to replace any file on the underlying file system. The attacker could then perform any of the following actions: add users with root privileges, modify the device configuration, execute arbitrary code, or cause a permanent denial of service (DoS) condition on the affected device. Note: Manual intervention is required to recover from the DoS condition. Customers are advised to contact the Cisco Technical Assistance Center (TAC) to help recover a device in this condition.

• CWE-36

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-bGG2UsjHVendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-bGG2UsjHVendor Advisory

Published

Jul 17, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-20396A vulnerability in the protocol handlers of Cisco Webex App …6.5
• CVE-2024-20397A vulnerability in the bootloader of Cisco NX-OS Software co…5.2
• CVE-2024-20398A vulnerability in the CLI of Cisco IOS XR Software could al…7.8
• CVE-2024-20399A vulnerability in the CLI of Cisco NX-OS Software could all…6.7
• CVE-2024-2040The Himer WordPress theme before 2.1.1 does not have CSRF ch…4.3
• CVE-2024-20400A vulnerability in the web-based management interface of Cis…4.7
• CVE-2024-20402A vulnerability in the SSL VPN feature for Cisco Adaptive Se…8.6
• CVE-2024-20403A vulnerability in the web-based management interface of Cis…5.4
• CVE-2024-20404A vulnerability in the web-based management interface of Cis…5.3
• CVE-2024-20405A vulnerability in the web-based management interface of Cis…6.1
• CVE-2024-20406A vulnerability in the segment routing feature for the Inter…7.4
• CVE-2024-20407A vulnerability in the interaction between the TCP Intercept…5.8