CVE-2012-10046

The E-Mail Security Virtual Appliance (ESVA) (tested on version ESVA_2057) contains an unauthenticated command injection vulnerability in the learn-msg.cgi script. The CGI handler fails to sanitize user-supplied input passed via the id parameter, allowing attackers to inject arbitrary shell commands. Exploitation requires no authentication and results in full command execution on the underlying system.

CVSS v4.0

9.3 CRITICALCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS

2.93% chance of exploitation in the next 30 days, 86th percentile

Published

2025-08-08

Updated

2026-04-07

Proof-of-concept exploits (2)

• https://www.exploit-db.com/exploits/20551
• https://www.exploit-db.com/exploits/20712

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/esva_exec.rb

References

• CVE Record
• NVD entry

Related

• CVE-2012-10045
• CVE-2012-10047
• CVE-2012-10044
• CVE-2012-10048
• CVE-2012-10043
• CVE-2012-10049