Hgiga MSR45 Isherlock-Useradmin vulnerabilities

3 CVEs affecting Hgiga MSR45 Isherlock-Useradmin, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-25848, published 2020-12-31.

More from Hgiga.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-25848, published 2020-12-31. Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days. HGiga MailSherlock contains weak authentication flaw that attackers grant privilege remotely with default password generation mechanism.
• CVE-2019-9883, published 2019-06-03. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to elevate privilege of specific account via…
• CVE-2019-9882, published 2019-06-03. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to add malicious email sources into whitelist via…