MailEnable Standard CVE-2025-34418

Exploitation requires the attacker to already have LOCAL write access to the MailEnable installation directory in order to plant a malicious MEAIMF.DLL, and requires the MailEnable administrative executable to subsequently be started (typically by an administrator) so the planted DLL is loaded. Limiting factors: no remote network vector (AV:L), low privileges are still required (PR:L - the attacker must be able to write to that directory, which on a hardened install should be restricted to administrators), and the affected product is MailEnable Standard prior to version 10.54. These conditions make exploitation most realistic as a privilege-escalation or persistence step after an attacker has already obtained a foothold, rather than an initial-access vector.

This is a locally-exploitable DLL search-order hijacking flaw (CWE-427) rated CVSS 4.0 8.5 (High) by the reporter (VulnCheck). The provided CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H) confirms the attack requires LOCAL access and LOW privileges (PR:L) - it is not remotely exploitable, which meaningfully caps real-world urgency despite the high numeric score. Supporting signals reinforce lower priority: EPSS is only 0.17% (6th percentile), the CVE is NOT on CISA KEV, and no public exploit (POC) is identified in the provided data - so there is no public exploit identified at time of analysis. The high VC/VI/VA:H impact reflects full code execution with the process's privileges once the precondition (write access to the install directory) is met, but that precondition is itself a significant barrier on a correctly-secured host. Net assessment: this is a high-CVSS but comparatively low real-world-risk issue - a privilege-escalation/persistence primitive relevant to post-compromise or insider scenarios rather than a mass-exploitation threat. The AV:L vector and description are consistent (both indicate local access); no conflicting signals were found.

A local attacker (or malware already running with limited privileges) who has write access to the MailEnable installation directory drops a malicious MEAIMF.DLL into that folder. When an administrator or service subsequently launches the MailEnable administrative executable, the planted DLL is loaded due to the insecure search order, running attacker code with that process's privileges. No public POC is referenced in the provided data, and the CVSS vector confirms local access with low privileges is required.