Read the docs

Cellopoint

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Cellopoint records in CISA KEV

No Cellopoint vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Cellos 3 records LOW Secure Email Gateway 2 records MEDIUM

Records

6 records

TI-2024-06251 CVE-2024-6744 · GHSA-c8f7-58h9-9239

Stack-based buffer overflow in Cellopoint Secure Email Gateway

Priority MEDIUM 50

The SMTP Listener of Secure Email Gateway from Cellopoint does not properly validate user input, leading to a Buffer Overflow vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00771 Published 2024-07-15 No fix listed CWE-121
TI-2024-08396 CVE-2024-9043 · GHSA-qmm7-r8jx-cj5h

Cellopoint Secure Email Gateway - Buffer Overflow

Priority MEDIUM 46

Secure Email Gateway from Cellopoint has Buffer Overflow Vulnerability in authentication process.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0136 Published 2024-09-20 No fix listed CWE-121
TI-2026-10393 CVE-2026-12059 · GHSA-qg44-88jp-h8xv

Cellopoint｜CelloOS - Improper Access Control

Priority MEDIUM 40

The SSH service of CelloOS developed by Cellopoint has an Improper Access Control vulnerability, allowing authenticated remote attackers to bypass the enforced command restrictions and execute operating system commands o…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0045 Published 2026-06-12 Fixed in 4.8.0 Build 20260316 CWE-1284
TI-2020-13151 CVE-2020-17385 · GHSA-g45j-3ccj-357x

Cellopoint CelloOS - Unauthenticated Arbitrary File Disclosure

Priority LOW 36

Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly, which allows unauthorized user to launch Path Traversal attack and access arbitrate file on the system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01602 Published 2020-08-25 No fix listed CWE-22
TI-2020-13150 CVE-2020-17384 · GHSA-j57q-8f2v-q7xh

Cellopoint CelloOS - Remote Command Execution (RCE)

Priority LOW 35

Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01927 Published 2020-08-25 No fix listed CWE-78
Open these records in search →