CVE-2024-28589

Name of the Vulnerable Software and Affected Versions Axigen Mail Server for Windows versions 10.5.18 and before

Description An issue was discovered in Axigen Mail Server for Windows, allowing local low-privileged attackers to execute arbitrary code and escalate privileges via insecure DLL loading from a world-writable directory during service initialization.

Recommendations For versions 10.5.18 and before, update to a version later than 10.5.18 to resolve the issue. As a temporary workaround, consider restricting access to world-writable directories used by the Axigen Mail Server service to minimize the risk of exploitation.