CVE-2025-34489 describes a local privilege escalation vulnerability in GFI MailEssentials versions prior to 21.8. A local attacker can achieve NT Authority/SYSTEM privileges by sending a specially crafted serialized payload to a .NET Remoting Service. This high-severity vulnerability (CVSS 7.8) has a low attack complexity and requires local access, but allows for complete compromise of confidentiality, integrity, and availability. Currently, there is no public exploit code available (Metasploit, Nuclei, ExploitDB), and it is not listed on the KEV catalog, with minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 21.8CPE matchmatch criteria | cpe:2.3:a:gfi:mailessentials:*:*:*:*:*:*:*:* | ||
>= 0, < 21.8CPE match | cpe:2.3:a:gfi:mailessentials:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.