Vulnerability · Published Jan 31, 2025 · Assigned by mitre
CVE-2024-52875
High 8.8
In plain English
A high-severity security flaw in Kerio Control from GFI. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 29.6% (higher than 98% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.
Official description
An issue was discovered in GFI Kerio Control 9.2.5 through 9.4.5. The dest GET parameter passed to the /nonauth/addCertException.cs and /nonauth/guestConfirm.cs and /nonauth/expiration.cs pages is not properly sanitized before being used to generate a Location HTTP header in a 302 HTTP response. This can be exploited to perform Open Redirect or HTTP Response Splitting attacks, which in turn lead to Reflected Cross-Site Scripting (XSS). Remote command execution can be achieved by leveraging the upgrade feature in the admin interface.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| GFI | Kerio Control | 9.2.5 – through 9.4.5 |
Weakness: CWE-113 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H