CVE-2024-28589 Information

Description

An issue was discovered in Axigen Mail Server for Windows versions 10.5.18 and before allows local low-privileged attackers to execute arbitrary code and escalate privileges via insecure DLL loading from a world-writable directory during service initialization.

Reference

https://www.axigen.com/knowledgebase/Local-Privilege-Escalation-Vulnerability-on-Axigen-for-Windows-CVE-2024-28589-_402.html