PT-2023-20889 · China Mobile · China Mobile Oa Mailbox Pc

Yzlcqx · Publicado 2023-04-10 · Atualizado 2025-02-11 · CVE-2023-26986

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions China Mobile OA Mailbox PC version 2.9.23

Description An issue in China Mobile OA Mailbox PC allows remote attackers to execute arbitrary commands on a victim host via user interaction with a crafted EML file sent to their OA mailbox.

Recommendations For China Mobile OA Mailbox PC version 2.9.23, consider avoiding the use of crafted EML files until a patch is available. As a temporary workaround, restrict user interaction with potentially malicious EML files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2023-26986

Produtos afetados

China Mobile Oa Mailbox Pc

Referências · 8

• 🔥 https://github.com/YZLCQX/Mailbox-remote-command-execution · Exploit
• https://osv.dev/vulnerability/CVE-2023-26986 · Aviso do Fabricante
• https://t.me/cvenotify/110889 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-26986 · Nota de Segurança
• https://gist.github.com/YZLCQX/0da0a438292a5479470c52dad8210462 · Nota
• https://t.me/cvenotify/48250 · Publicação no Telegram
• https://t.me/cibsecurity/61777 · Publicação no Telegram
• https://t.me/cvenotify/47889 · Publicação no Telegram