Multiple SMTP services are susceptible to spoofing attacks due to insufficient enforcement

🗓️ 30 Jul 2024 00:00:00Reported by CERTType

Multiple SMTP services susceptible to spoofing attacks due to insufficient enforcement. Vulnerable to email impersonation, flaws in SPF, DKIM, and DMARC authentication protocols allow authenticated attackers to spoof sender identities and abuse sender trust

Reporter	Title	Published	Views	Family All 16
Circl	CVE-2024-7208	30 Jul 202419:55	–	circl
Circl	CVE-2024-7209	30 Jul 202419:55	–	circl
CNNVD	SMTP 安全漏洞	30 Jul 202400:00	–	cnnvd
CVE	CVE-2024-7208	30 Jul 202417:01	–	cve
CVE	CVE-2024-7209	30 Jul 202417:01	–	cve
Cvelist	CVE-2024-7208 CVE-2024-7208	30 Jul 202417:01	–	cvelist
Cvelist	CVE-2024-7209 CVE-2024-7209	30 Jul 202417:01	–	cvelist
EUVD	EUVD-2024-48177	3 Oct 202520:07	–	euvd
NVD	CVE-2024-7208	30 Jul 202417:15	–	nvd
NVD	CVE-2024-7209	30 Jul 202417:15	–	nvd

Source	Link
labs	www.labs.guard.io/echospoofing-a-massive-phishing-campaign-exploiting-proofpoints-email-protection-to-dispatch-3dd6b5417db6
darkreading	www.darkreading.com/threat-intelligence/20-million-trusted-domains-vulnerable-to-email-hosting-exploits
rfc-editor	www.rfc-editor.org/rfc/rfc5321.html
kb	www.kb.cert.org/vuls/id/435963
kb	www.kb.cert.org/vuls/id/176972
kb	www.kb.cert.org/vuls/id/814617
github	www.github.com/magcks/milterfrom
cloudflare	www.cloudflare.com/learning/email-security/dmarc-dkim-spf/

06 Aug 2024 17:33Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.16.5

EPSS0.00238

SSVC