VulnerabilityAnalyzed

CVE-2024-9043

Secure Email Gateway from Cellopoint has Buffer Overflow Vulnerability in authentication process.

CRITICAL 9.8EPSS 1.36%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.36%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Secure Email Gateway from Cellopoint has Buffer Overflow Vulnerability in authentication process. Remote unauthenticated attackers can send crafted packets to crash the process, thereby bypassing authentication and obtaining system administrator privileges.

CVSS 3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 1.36% probability · 70th percentile
CISA KEV: Not listed
Weakness: CWE-121, CWE-787
Affected: cellopoint/secure email gateway
Source: twcert@cert.org.tw

References

https://www.twcert.org.tw/en/cp-139-8103-b0568-2.htmlThird Party Advisory
https://www.twcert.org.tw/tw/cp-132-8102-b94a9-1.htmlThird Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.