Lucene search
HistoryJul 15, 2024 - 7:15 a.m.
CVE-2024-6744
smtp listener
buffer overflow
cellopoint secure email gateway
remote attacker
arbitrary system commands
cve-2024-6744
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
38.3%
The SMTP Listener of Secure Email Gateway from Cellopoint does not properly validate user input, leading to a Buffer Overflow vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands on the remote server.
Affected configurations
Node
cellopointsecure_email_gatewayRange<4.5.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cellopoint | secure_email_gateway | * | cpe:2.3:a:cellopoint:secure_email_gateway:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2024-6744
2024-07-15 06:32:21
cve
cve
CVE-2024-6744
2024-07-15 07:15:25
vulnrichment
vulnrichment
CVE-2024-6744
2024-07-15 06:32:21
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
38.3%
Related for NVD:CVE-2024-6744