CVE-2012-10046 E-Mail Security Virtual Appliance learn-msg.cgi Command Injection

CriticalCVSS 9.3 EPSS 4.1% Framework module

Published: 2025-08-08 21:11
Updated: 2026-06-17 02:38
Exploit status: Public exploit available

Description

The E-Mail Security Virtual Appliance (ESVA) (tested on version ESVA_2057) contains an unauthenticated command injection vulnerability in the learn-msg.cgi script. The CGI handler fails to sanitize user-supplied input passed via the id parameter, allowing attackers to inject arbitrary shell commands. Exploitation requires no authentication and results in full command execution on the underlying system.

Affected products

Product	Affected versions	Fixed in
ESVA-Project E-Mail Security Virtual Appliance	= ESVA_2057	No fix listed

References

CVSS v4.0

9.3 Critical

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Attack Vector: Network
Attack Complexity: Low
Attack Requirements: None
Privileges Required: None
User Interaction: None
Vulnerable System Confidentiality: High
Vulnerable System Integrity: High
Vulnerable System Availability: High
Subsequent System Confidentiality: None
Subsequent System Integrity: None
Subsequent System Availability: None

All scores (2)

v4.0 9.3 · vulncheck
v4.0 9.3 · disclosure@vulncheck.com

Weakness & likelihood

EPSS (exploitation probability, 30 days): 4.13% (percentile 91.0)
CWE: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

E-Mail Security Virtual Appliance learn-msg.cgi Command Injection Framework module · Metasploit Framework (Rapid7) · 2012-08-16