CVE-2020-12618

CVE-2020-12618 describes a vulnerability in eM Client before version 7.2.33412.0 where it automatically imported S/MIME certificates, silently replacing existing ones. This allowed a man-in-the-middle attacker to obtain an email-validated S/MIME certificate and replace a target's public key, enabling decryption of future communications. The vulnerability has a CVSS score of 4.8 (MEDIUM), indicating a network-based attack with high attack complexity and low impact on confidentiality and integrity. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), it has received some community discussion and media coverage, suggesting awareness within the security community.