CVE-2024-9043: Cellopoint Secure Email Gateway - Buffer Overflow
First published: Fri Sep 20 2024(Updated: )
Secure Email Gateway from Cellopoint has Buffer Overflow Vulnerability in authentication process. Remote unauthenticated attackers can send crafted packets to crash the process, thereby bypassing authentication and obtaining system administrator privileges.
Credit: twcert@cert.org.tw
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cellopoint Secure Email Gateway | >=4.2.1<=4.5.0 |
Remedy
Install patch Build_20240712 or later.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-9043?
CVE-2024-9043 is classified as a critical vulnerability due to its potential to allow unauthorized system administrator access.
How do I fix CVE-2024-9043?
To fix CVE-2024-9043, users should update to a version of Cellopoint Secure Email Gateway newer than 4.5.0.
Who is affected by CVE-2024-9043?
CVE-2024-9043 affects all versions of Cellopoint Secure Email Gateway from 4.2.1 to 4.5.0.
What type of vulnerability is CVE-2024-9043?
CVE-2024-9043 is a buffer overflow vulnerability that occurs during the authentication process.
Can CVE-2024-9043 be exploited remotely?
Yes, CVE-2024-9043 can be exploited remotely by unauthenticated attackers who send crafted packets.
- agent/title
- agent/references
- agent/remedy
- agent/description
- agent/type
- agent/first-publish-date
- agent/severity
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/weakness
- agent/last-modified-date
- agent/softwarecombine
- agent/trending
- agent/tags
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/source
- vendor/cellopoint
- canonical/cellopoint secure email gateway
- version/cellopoint secure email gateway/4.2.1
- version/cellopoint secure email gateway/4.5.0