Rewterz Threat Alert – WSHRAT aka Houdini – Active IOCs

Rewterz Threat Advisory – CVE-2023-20010 – Cisco Unified Communications Manager Vulnerability

January 19, 2023

Rewterz Threat Advisory – CVE-2023-20057 – Cisco Email Security Appliance Vulnerability

Severity

Medium

Analysis Summary

CVE-2023-20057

Cisco Email Security Appliance could allow a remote attacker to bypass security restrictions, caused by improper processing of URLs. By crafting a URL in a particular way, an attacker could exploit this vulnerability to bypass the URL reputation filters that are configured for an affected device, which could allow malicious URLs to pass through the device.

Impact

Security Bypass

Indicators Of Compromise

CVE

CVE-2023-20057

Affected Vendors

Cisco

Affected Products

Cisco AsyncOS Software for Email Security Appliances (ESA)

Remediation

Refer to Cisco Security Advisory for patch, upgrade or suggested workaround information.

Cisco Security Advisory

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo