CVE-2024-6744

Katalog CVE

CVSS 9.8 · Critical EPSS 0,77%

Kerentanan Stack-based Buffer Overflow pada cellopoint secure email gateway. Skor CVSS 3.1 9.8 (Critical) menurut cert.org.tw.

Deskripsi (NVD)

The SMTP Listener of Secure Email Gateway from Cellopoint does not properly validate user input, leading to a Buffer Overflow vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands on the remote server.

Rincian

Terbit di NVD

15 Juli 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber cert.org.tw
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-121: Stack-based Buffer Overflow
CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,77% peluang dieksploitasi; lebih tinggi dari 54,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.twcert.org.tw/en/cp-139-7937-acbb5-2.html advisory pihak ketiga
• https://www.twcert.org.tw/tw/cp-132-7936-f6381-1.html advisory pihak ketiga