Vulnerabilities > CVE-2023-25267 - Out-of-bounds Write vulnerability in GFI Kerio Connect 9.4.1
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 (fixed in 10.0.0). There is a stack-based Buffer Overflow in the webmail component's 2FASetup function via an authenticated request with a long primaryEMailAddress field to the webmail/api/jsonrpc URI.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |