CVE-2017-7440 : What You Need to Know

Kerio Connect versions 8.0.0 to 9.2.2 and Kerio Connect Client desktop application for Windows and Mac versions 9.2.0 to 9.2.2 are vulnerable to clickjacking attacks when the email preview feature is enabled.

Understanding CVE-2017-7440

Clickjacking attacks can be conducted on Kerio Connect and its client application, potentially allowing remote attackers to exploit the vulnerability.

What is CVE-2017-7440?

Clickjacking attacks can be executed on Kerio Connect versions 8.0.0 to 9.2.2 and the Kerio Connect Client desktop application for Windows and Mac versions 9.2.0 to 9.2.2 when the email preview feature is turned on. This vulnerability enables malicious actors to manipulate users into performing unintended actions by hiding malicious content under legitimate clickable elements.

The Impact of CVE-2017-7440

This vulnerability could be exploited by remote attackers to conduct clickjacking attacks through specially crafted email messages, potentially leading to unauthorized actions being performed by users unknowingly.

Technical Details of CVE-2017-7440

Kerio Connect and Kerio Connect Client are susceptible to clickjacking attacks due to the following:

Vulnerability Description

The vulnerability affects Kerio Connect versions 8.0.0 to 9.2.2 and Kerio Connect Client desktop application for Windows and Mac versions 9.2.0 to 9.2.2 when the email preview feature is enabled. Attackers can exploit this by crafting malicious email messages.

Affected Systems and Versions

Kerio Connect versions 8.0.0 to 9.2.2
Kerio Connect Client desktop application for Windows and Mac versions 9.2.0 to 9.2.2

Exploitation Mechanism

Attackers can leverage the vulnerability by sending specially crafted email messages to users with the email preview feature enabled, tricking them into interacting with hidden malicious content.

Mitigation and Prevention

It is crucial to take immediate steps to mitigate the risks posed by CVE-2017-7440:

Immediate Steps to Take

Disable the email preview feature in Kerio Connect and its client application.
Educate users about the risks of interacting with suspicious emails.

Long-Term Security Practices

Regularly update Kerio Connect and its client application to the latest versions.
Implement email security best practices to prevent malicious emails from reaching users.

Patching and Updates

Apply patches or updates provided by Kerio to address the vulnerability and enhance the security of the systems.