CRITICAL CISCO BUG LETS HACKERS ADD ROOT USERS ON SEG DEVICES

Summary from the TLDR InfoSec newsletter

Cisco has fixed a critical vulnerability that allows hackers to add root users and crash SEG devices using malicious email attachments. The flaw involves an absolute path traversal weakness in SEG content scanning, enabling attackers to replace files on the system. Cisco advises updating vulnerable appliances to prevent exploitation and contacting its Technical Assistance Center for assistance.