VULNERABILITY INTELLIGENCE

CVE-2024-5670

CVSS score9.8 CRITICAL
EPSS probability0.90%
CISA KEVNot currently listed
Published2024-07-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The web services of Softnext's products, Mail SQR Expert and Mail Archiving Expert do not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the remote server.

Weakness classification

  • twcert@cert.org.tw: CWE-78

Primary references