Lucene search

K
cve[email protected]CVE-2023-50440
HistoryDec 13, 2023 - 9:15 p.m.

CVE-2023-50440

2023-12-1321:15:09
web.nvd.nist.gov
7
cve-2023-50440
zed containers
primx zed
windows
anssi
zonecentral
zedmail
zedfree
zedpro
unauthenticated attack
remote code execution
security vulnerability

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.0%

ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission); ZED! for Windows before Q.2021.2 (ANSSI qualification submission); ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification submission); ZONECENTRAL for Windows before 2023.5; ZEDMAIL for Windows before 2023.5; ZED! for Windows, Mac, Linux before 2023.5; ZEDFREE for Windows, Mac, Linux before 2023.5; or ZEDPRO for Windows, Mac, Linux before 2023.5 can be modified by an unauthenticated attacker to include a UNC reference so that it could trigger network access to an attacker-controlled computer when opened by the victim.

Affected configurations

NVD
Node
primxzed\!Range<2023.5enterpriselinux
OR
primxzed\!Range<2023.5enterprisemacos
OR
primxzed\!Range<2023.5freelinux
OR
primxzed\!Range<2023.5freemacos
OR
primxzed\!Range<2023.5freewindows
OR
primxzed\!Range<2023.5prolinux
OR
primxzed\!Range<2023.5promacos
OR
primxzed\!Range<2023.5prowindows
OR
primxzed\!Range<q.2020.3enterprisewindows
OR
primxzed\!Range2023.02023.5enterprisewindows
OR
primxzed\!Rangeq.2021.0q.2021.2enterprisewindows
OR
primxzedmailRange<2023.5windows
OR
primxzonecentralRange<q.2021.2windows
OR
primxzonecentralRange2023.02023.5windows

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.0%

Related for CVE-2023-50440