Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-29557 — Documents a high-severity ExaGrid EX10 MailConfiguration API access control flaw that leaks plaintext SMTP credentials to authenticated operators, with attack vectors and mitigations. | Kitploit
Tools/GitHubGitHub/0xsu3ks/cve-2025-29557
Vulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringLearning & EducationAPI Security
GitHub0xsu3ks/cve-2025-29557

CVE-2025-29557

Documents a high-severity ExaGrid EX10 MailConfiguration API access control flaw that leaks plaintext SMTP credentials to authenticated operators, with attack vectors and mitigations.

View Repository
41 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-29557 – ExaGrid MailConfiguration API Credential Disclosure

📝 Overview

Vulnerability Title: SMTP Credential Disclosure via MailConfiguration API
Product: ExaGrid EX10 Backup Appliance
Versions Affected: 6.3 – 7.0.1.P08
CVE ID: CVE-2025-29557
Severity: High
Attack Vector: Remote (Authenticated)
Impact: Information Disclosure – Plaintext SMTP Credentials

🧨 Description

A critical access control flaw exists in the MailConfiguration API endpoint of ExaGrid EX10 appliances. Authenticated users with operator-level privileges can send a crafted HTTP request to this endpoint and receive SMTP configuration details — including plaintext SMTP passwords.

This represents a clear violation of privilege boundaries, as operator roles are not intended to have access to sensitive credentials.

🔬 Attack Vectors

🔹 Direct API Request Manipulation

  • A user with operator-level access sends a GET request to the MailConfiguration API.
  • The API returns a full JSON payload containing SMTP usernames and passwords in plaintext.

    • 🔹 API Scraping or Enumeration

    • An attacker with programmatic access can query multiple appliances or endpoints at scale.
    • Enables credential harvesting across environments, especially in large deployments.

    📦 Affected Components

    • Product: ExaGrid EX10
    • Component: MailConfiguration API
    • Versions: 6.3 through 7.0.1.P08

    📉 Impact

    • Confidentiality breach: Disclosure of plaintext credentials used for outbound email (alerting, support).
    • Pivoting: Possible access to internal or cloud-based SMTP services.
    • Compliance violation: Violation of basic credential protection practices (e.g., storing secrets in plaintext).

    🛡️ Mitigation

    • Upgrade to the latest patched version once available.
    • Remove unnecessary SMTP configurations or use tokens where supported.
    • Monitor API access logs for MailConfiguration queries from operator accounts.

    ✅ Vendor Status

    • Confirmed and acknowledged by ExaGrid.

    👨‍💻 Discoverer

    Security Researcher – Kevin Suckiel -- 0xsu3ks Discovered and responsibly disclosed CVE-2025-29557.

    ⚠️ Legal Notice

    This content is provided for educational and authorized testing purposes only.
    The author assumes no liability for misuse or unauthorized access.

    Download Tool