GFI MailEssentials < 21.8 Local Privilege Escalation
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.8epss 0.3%
exploitation probability
0.3%top 77% of all CVEs
observed exploitation
nono source reports it
In short
GFI MailEssentials before version 21.8 has a flaw that lets someone already on the computer gain full administrator access by sending a specially crafted message to a service. This is dangerous because it allows attackers to take complete control of the system.
Technical detail
A local privilege escalation vulnerability exists in GFI MailEssentials < 21.8 via unsafe deserialization of .NET Remoting payloads. An attacker with local access can send a malicious serialized object to the vulnerable service to achieve NT Authority/SYSTEM level execution. The attack requires local system access but bypasses normal permission restrictions.
Summary generated and translated by AI from the official description.
GFI MailEssentials prior to version 21.8 is vulnerable to a local privilege escalation issue. A local attacker can escalate to NT Authority/SYSTEM by sending a crafted serialized payload to a .NET Remoting Service.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
GFI · MailEssentials