CVE-2020-13376

Name of the Vulnerable Software and Affected Versions SecurEnvoy SecurMail version 9.3.503

Description The issue allows attackers to upload executable files and achieve OS command execution via a crafted SecurEnvoyReply cookie. This enables attackers to potentially execute system commands, posing a significant security risk.

Recommendations For SecurEnvoy SecurMail version 9.3.503, consider restricting access to the SecurEnvoyReply cookie to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.