PT-2024-22489 · Axigen · Axigen Mail Server

Alaa Kachouh + 1 · Published 2024-04-03 · Updated 2024-08-01 · CVE-2024-28589

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Axigen Mail Server for Windows versions 10.5.18 and before

Description An issue was discovered in Axigen Mail Server for Windows, allowing local low-privileged attackers to execute arbitrary code and escalate privileges via insecure DLL loading from a world-writable directory during service initialization.

Recommendations For versions 10.5.18 and before, update to a version later than 10.5.18 to resolve the issue. As a temporary workaround, consider restricting access to world-writable directories used by the Axigen Mail Server service to minimize the risk of exploitation.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2024-28589

Affected Products

Axigen Mail Server

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-28589 · Security Note
• https://twitter.com/CVEnew/status/1775424326986093024 · Twitter Post
• https://axigen.com/knowledgebase/Local-Privilege-Escalation-Vulnerability-on-Axigen-for-Windows-CVE-2024-28589-_402.html · Note
• https://twitter.com/VulmonFeeds/status/1775471750379106663 · Twitter Post
• https://t.me/cvenotify/75616 · Telegram Post