CVE-2025-20153
Estado: AnalizadaMedia (5.3)—
This vulnerability is due to improper handling of email that passes through an affected device. An attacker could exploit this vulnerability by sending a crafted email through the affected device. A successful exploit could allow the attacker to bypass email filters on the affected device.
Detalles técnicos trazas, registros y código del informe original
A vulnerability in the email filtering mechanism of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to bypass the configured rules and allow emails that should have been denied to flow through an affected device.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- Puntuación base: 5.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.36%
- Percentil entre todas las CVEs puntuadas: 28
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-284
- NVD-CWE-noinfo
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2025-20153",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2025-20153",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2025-02-19T16:19:02.308539Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "psirt@cisco.com",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 5.8,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
"integrityImpact": "LOW",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 1.4,
"exploitabilityScore": 3.9
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 5.3,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"integrityImpact": "LOW",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 1.4,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "psirt@cisco.com",
"affectedData": [
{
"vendor": "Cisco",
"product": "Cisco Secure Email",
"versions": [
{
"status": "affected",
"version": "14.0.0-698"
},
{
"status": "affected",
"version": "13.5.1-277"
},
{
"status": "affected",
"version": "13.0.0-392"
},
{
"status": "affected",
"version": "14.2.0-620"
},
{
"status": "affected",
"version": "13.0.5-007"
},
{
"status": "affected",
"version": "13.5.4-038"
},
{
"status": "affected",
"version": "14.2.1-020"
},
{
"status": "affected",
"version": "14.3.0-032"
},
{
"status": "affected",
"version": "15.0.0-104"
},
{
"status": "affected",
"version": "15.0.1-030"
},
{
"status": "affected",
"version": "15.5.0-048"
},
{
"status": "affected",
"version": "15.5.1-055"
},
{
"status": "affected",
"version": "15.5.2-018"
},
{
"status": "affected",
"version": "16.0.0-050"
},
{
"status": "affected",
"version": "15.0.3-002"
}
],
"defaultStatus": "unknown"
}
]
}
],
"published": "2025-02-19T16:15:40.860",
"references": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-mailpol-bypass-5nVcJZMw",
"tags": [
"Vendor Advisory"
],
"source": "psirt@cisco.com"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@cisco.com",
"description": [
{
"lang": "en",
"value": "CWE-284"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the email filtering mechanism of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to bypass the configured rules and allow emails that should have been denied to flow through an affected device. \r\n\r\nThis vulnerability is due to improper handling of email that passes through an affected device. An attacker could exploit this vulnerability by sending a crafted email through the affected device. A successful exploit could allow the attacker to bypass email filters on the affected device."
},
{
"lang": "es",
"value": "Una vulnerabilidad en el mecanismo de filtrado de correo electrónico de Cisco Secure Email Gateway podría permitir que un atacante remoto no autenticado eluda las reglas configuradas y permita que correos electrónicos que deberían haber sido denegados fluyan a través de un dispositivo afectado. Esta vulnerabilidad se debe a una gestión inadecuada del correo electrónico que pasa a través de un dispositivo afectado. Un atacante podría aprovechar esta vulnerabilidad enviando un correo electrónico diseñado a través del dispositivo afectado. Una explotación exitosa podría permitir al atacante eludir los filtros de correo electrónico en el dispositivo afectado."
}
],
"lastModified": "2026-06-17T08:40:48.240",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:secure_email_gateway:13.0.0-392:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2B665D0A-BE53-4F56-A6AE-26351A0A058B"
},
{
"criteria": "cpe:2.3:a:cisco:secure_email_gateway:13.0.5-007:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F4B3CA68-DF66-4075-AA03-7E8B2E219A09"
},
{
"criteria": "cpe:2.3:a:cisco:secure_email_gateway:13.5.1-277:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E804F494-16F9-445C-9946-52319506C248"
},
{
"criteria": "cpe:2.3:a:cisco:secure_email_gateway:13.5.4-038:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BFF60385-9992-448E-8FBA-1F91067466E6"
},
{
"criteria": "cpe:2.3:a:cisco:secure_email_gateway:14.0.0-698:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EB872778-1210-4BC8-B324-302BD236585D"
},
{
"criteria": "cpe:2.3:a:cisco:secure_email_gateway:14.2.0-620:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "39B26E72-1681-4430-BC85-4D3918AD3C1F"
},
{
"criteria": "cpe:2.3:a:cisco:secure_email_gateway:14.2.1-020:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C8C47FE2-D861-45B2-B4D9-6CDFE725FECB"
},
{
"criteria": "cpe:2.3:a:cisco:secure_email_gateway:14.3.0-032:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D4800305-6ECA-4989-889B-C410C33BDF6A"
},
{
"criteria": "cpe:2.3:a:cisco:secure_email_gateway:15.0.0-104:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6170EBB8-805A-4AEB-9981-164EC1702061"
},
{
"criteria": "cpe:2.3:a:cisco:secure_email_gateway:15.0.1-030:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2B513990-27FD-4865-9FD2-202B68B9807A"
},
{
"criteria": "cpe:2.3:a:cisco:secure_email_gateway:15.0.3-002:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C09E85C0-7339-494F-BC4B-5489D28AC3E9"
},
{
"criteria": "cpe:2.3:a:cisco:secure_email_gateway:15.5.0-048:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BDC4AB77-50C8-4852-A806-5CCF89D33A0E"
},
{
"criteria": "cpe:2.3:a:cisco:secure_email_gateway:15.5.1-055:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22C005A1-635B-497F-BFE4-27D97ABC13EF"
},
{
"criteria": "cpe:2.3:a:cisco:secure_email_gateway:15.5.2-018:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4AE7346E-44AA-4032-9C85-104912555277"
},
{
"criteria": "cpe:2.3:a:cisco:secure_email_gateway:16.0.0-050:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CDAD9D75-43A9-434E-A1DD-7DCA824A4A58"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@cisco.com"
}