CVE-2025-34422

Unknown Unknown - Not Provided

BaseFortify

Publication date: 2025-12-10

Last updated on: 2025-12-10

Assigner: VulnCheck

Description

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIPC.DLL from its installation directory without sufficient integrity validation or a secure search order. A local attacker with write access to that directory can plant a malicious MEAIPC.DLL, which is then loaded on execution, resulting in attacker-controlled code running with the privileges of the process.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-10

Last Modified

2025-12-10

Generated

2026-07-06

AI Q&A

2025-12-11

EPSS Evaluated

2026-07-05

NVD

CVE-2025-34422

Affected Vendors & Products

Vendor	Product	Version / Range
mailenable	mailenable	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-427	The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

Attack-Flow Graph

Detection Guidance

This vulnerability can be detected by checking if the MailEnable administrative executable's installation directory contains a suspicious or unauthorized MEAIPC.DLL file, especially if it is writable by untrusted users. You can verify the presence and permissions of MEAIPC.DLL in the installation directory. For example, on a Windows system, you can use the following commands: 1) To locate the DLL: `dir /s /b MEAIPC.DLL` within the MailEnable installation directory. 2) To check permissions on the DLL or the directory: `icacls <path_to_MEAIPC.DLL_or_directory>`. Additionally, monitor for unexpected DLL loads or executions related to MEAIPC.DLL using system monitoring tools. Since the vulnerability requires local write access, verifying directory permissions and unexpected DLL files is key. [1]

Executive Summary

This vulnerability exists in MailEnable versions prior to 10.54 and involves unsafe DLL loading. The MailEnable administrative executable loads the MEAIPC.DLL from its installation directory without proper integrity checks or a secure search order. A local attacker who has write access to that directory can place a malicious MEAIPC.DLL file, which will be loaded by the executable, allowing the attacker to execute arbitrary code with the privileges of the process.

Impact Analysis

If exploited, this vulnerability allows a local attacker to execute arbitrary code with the privileges of the MailEnable administrative process. This could lead to unauthorized control over the affected system, potentially compromising system integrity, confidentiality, and availability depending on the privileges of the process.

Mitigation Strategies

To mitigate this vulnerability, immediately restrict write access to the MailEnable installation directory to trusted users only, preventing local attackers from planting a malicious MEAIPC.DLL. Additionally, upgrade MailEnable to version 10.54 or later where this unsafe DLL loading vulnerability is fixed.

Hi! I’m here to help you understand CVE-2025-34422. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70