CVE-2021-32234

SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows remote code execution.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 86%
VendorProductVersion
smartertoolssmartermail
16.0.6345 ≤
𝑥
< 100.0.7803
𝑥
= Vulnerable software versions
References
https://csirt.divd.nl/cases/DIVD-2021-00006/
https://www.smartertools.com/smartermail/release-notes/current
https://csirt.divd.nl/cases/DIVD-2021-00006/
https://www.smartertools.com/smartermail/release-notes/current