Vulnerability · Published Apr 5, 2022 · Assigned by mitre

CVE-2022-25356

Medium 5.3

In plain English

A medium-severity security flaw in the affected software. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 5.7% (higher than 93% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)5.7%top 6.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack tooling1Nuclei

Official description

Alt-N MDaemon Security Gateway through 8.5.0 allows SecurityGateway.dll?view=login XML Injection.

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

Weakness: CWE-91 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References

https://www.swascan.com/security-blog/ x_refsource_MISC
https://www.altn.com/Products/SecurityGateway-Email-Firewall/ x_refsource_MISC
https://www.swascan.com/security-advisory-alt-n-security-gateway/ x_refsource_MISC
https://www.tinextacyber.com/security-advisory-alt-n-security-gataway-cve-2022-25356/ exploit