« Volver al listado

CVE-2024-5670

Estado: ModificadaCrítica (9.8)—

The web services of Softnext's products, Mail SQR Expert and Mail Archiving Expert do not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the remote server.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Softnext — SN OS

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-5670",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-5670",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-07-29T13:42:04.661403Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "twcert@cert.org.tw",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "twcert@cert.org.tw",
      "affectedData": [
        {
          "vendor": "Softnext",
          "product": "SN OS 12.1",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "230922",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Softnext",
          "product": "SN OS 12.3",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "230922",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Softnext",
          "product": "SN OS 10.3",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "230631",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:softnext:mail_sqr_expert:*:*:*:*:*:*:*:*"
          ],
          "vendor": "softnext",
          "product": "mail_sqr_expert",
          "versions": [
            {
              "status": "affected",
              "version": "12.1",
              "lessThan": "230922",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "12.3",
              "lessThan": "230922",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "10.3",
              "lessThan": "230631",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:softnext:mail_archiving_expert:*:*:*:*:*:*:*:*"
          ],
          "vendor": "softnext",
          "product": "mail_archiving_expert",
          "versions": [
            {
              "status": "affected",
              "version": "12.1",
              "lessThan": "230922",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "12.3",
              "lessThan": "230922",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "10.3",
              "lessThan": "230631",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-07-29T03:15:02.167",
  "references": [
    {
      "url": "https://www.twcert.org.tw/en/cp-139-7959-09d0e-2.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "twcert@cert.org.tw"
    },
    {
      "url": "https://www.twcert.org.tw/tw/cp-132-7958-817f4-1.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "twcert@cert.org.tw"
    },
    {
      "url": "https://www.twcert.org.tw/en/cp-139-7959-09d0e-2.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.twcert.org.tw/tw/cp-132-7958-817f4-1.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "twcert@cert.org.tw",
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The web services of Softnext's products, Mail SQR Expert and Mail Archiving Expert do not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the remote server."
    },
    {
      "lang": "es",
      "value": " Los servicios web de los productos de Softnext, Mail SQR Expert y Mail Archiving Expert no validan adecuadamente la entrada del usuario, permitiendo a atacantes remotos no autenticados inyectar comandos arbitrarios del sistema operativo y ejecutarlos en el servidor remoto."
    }
  ],
  "lastModified": "2026-06-17T08:16:24.197",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:softnext:sn_os:10.3:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D1C0F505-B6FD-4525-B235-218FA8C54BD2"
            },
            {
              "criteria": "cpe:2.3:o:softnext:sn_os:12.1:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "18BF605C-CF2A-4DB2-A143-4CB233EB613C"
            },
            {
              "criteria": "cpe:2.3:o:softnext:sn_os:12.3:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FE1A71A6-56C3-4C1B-867B-30AE566785F5"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "twcert@cert.org.tw"
}