The vulnerability allows an unauthenticated attacker to write arbitrary files on the underlying operating system of a Cisco Secure Email Gateway. By exploiting improper handling of email attachments in the Advanced Malware Protection feature, the attacker can write files and execute commands with root privileges. This results in full compromise of the system, enabling data exfiltration, persistence, and the ability to tamper with or disrupt services.

Cisco Secure Email Gateway, specifically the Advanced Malware Protection component. No specific version range is listed, indicating that all deployed versions are potentially affected until an official patch is applied.

The CVSS score of 9.8 reflects a critical severity, and the vulnerability is listed in the CISA KEV catalog, highlighting that it is actively exploited in the wild. Because the EPSS score is not available, the likelihood estimate is unclear, but the high score and KEV status together imply a high risk of exploitation. The attack vector is remote and requires sending a crafted email attachment to the target device, which is relatively easy for adversaries with email access.