Post
HIGH

Critical SEPPMail Gateway Vulnerabilities Enable RCE and Full Mail Traffic Read

· vulnerability · rce · appsec

Critical vulnerabilities in SEPPMail Secure E-Mail Gateway, an enterprise email security appliance, allow remote code execution and reading of arbitrary mail traffic from the virtual appliance. Successful exploitation could expose all mail processed by the gateway or provide an attacker with an entry point into the internal network. SEPPMail is deployed by enterprises as a secure email and encryption gateway, making compromise particularly sensitive given the confidentiality of email content. Administrators running SEPPMail should apply available patches immediately and review appliance logs for indicators of unauthorized access.