CVE-2014-2119

CVE-2014-2119 describes a critical vulnerability in Cisco AsyncOS Software for Email Security Appliance (ESA) and Content Security Management Appliance (SMA) that allows remote authenticated users to execute arbitrary code with root privileges. The vulnerability, identified as a weakness in the End User Safelist/Blocklist (SLBL) service, can be exploited by uploading a modified SLBL database file via an FTP session. With a CVSS score of 8.5, it is considered highly severe due to its network-based attack vector, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.