Cisco AsyncOS for Cisco Secure Email Gateway has an email parsing flaw where crafted emails inject malicious SQL due to insufficient input validation. Unauthenticated remote attackers can send a crafted message to run arbitrary SQL that leads to OS command execution with root privileges. Affected versions include 14.0.0-698, 13.5.1-277, 13.0.0-392, 14.2.0-620, 13.0.5-007. Apply Cisco mitigations/updates.