{"id":"CVE-2024-9043","aliases":["EUVD-2024-49687","GHSA-qmm7-r8jx-cj5h"],"status":"published","title":"Cellopoint Secure Email Gateway - Buffer Overflow","description":"Secure Email Gateway from Cellopoint has Buffer Overflow Vulnerability in authentication process. Remote unauthenticated attackers can send crafted packets to crash the process, thereby bypassing authentication and obtaining system administrator privileges.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.0136,"percentile":0.71899,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-121","CWE-787"],"published":"2024-09-20T10:14:02Z","modified":"2026-06-17T08:23:50Z","products":[{"vendor":"cellopoint","product":"secure email gateway"},{"vendor":"cellopoint","product":"secure_email_gateway"},{"vendor":"seppmail ag","product":"secure email gateway"}],"references":[{"url":"https://www.twcert.org.tw/tw/cp-132-8102-b94a9-1.html","tags":["third-party-advisory","Third Party Advisory"]},{"url":"https://www.twcert.org.tw/en/cp-139-8103-b0568-2.html","tags":["third-party-advisory","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-9043"},{"url":"https://github.com/advisories/GHSA-qmm7-r8jx-cj5h"}],"sources":{"cve":[{"id":"CVE-2024-9043","title":"Cellopoint Secure Email Gateway - Buffer Overflow","description":"Secure Email Gateway from Cellopoint has Buffer Overflow Vulnerability in authentication process. Remote unauthenticated attackers can send crafted packets to crash the process, thereby bypassing authentication and obtaining system administrator privileges.","status":"published","published":"2024-09-20T10:14:02.578Z","modified":"2024-09-20T13:53:46.836Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:34:06.147811Z"}],"euvd":[{"id":"EUVD-2024-49687","description":"Secure Email Gateway from Cellopoint has Buffer Overflow Vulnerability in authentication process. Remote unauthenticated attackers can send crafted packets to crash the process, thereby bypassing authentication and obtaining system administrator privileges.","status":"published","published":"2024-09-20T10:14:02Z","modified":"2024-09-20T13:53:46Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T00:28:17.874342Z"}],"ghsa":[{"id":"GHSA-qmm7-r8jx-cj5h","title":"Secure Email Gateway from Cellopoint has Buffer Overflow Vulnerability in authentication process....","description":"Secure Email Gateway from Cellopoint has Buffer Overflow Vulnerability in authentication process. Remote unauthenticated attackers can send crafted packets to crash the process, thereby bypassing authentication and obtaining system administrator privileges.","status":"published","published":"2024-09-20T12:31:54Z","modified":"2024-09-25T18:32:28Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-121","CWE-787"],"updated_at":"2026-11-02T14:58:20.799511Z"}],"nvd":[{"id":"CVE-2024-9043","description":"Secure Email Gateway from Cellopoint has Buffer Overflow Vulnerability in authentication process. Remote unauthenticated attackers can send crafted packets to crash the process, thereby bypassing authentication and obtaining system administrator privileges.","status":"published","published":"2024-09-20T11:15:13.28Z","modified":"2026-06-17T08:23:50.753Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-121","CWE-787"],"updated_at":"2026-11-02T14:10:27.456509Z"}]}}