Lucene search

K
kasperskyKaspersky LabKLA73522
HistoryDec 22, 2023 - 12:00 a.m.

KLA73522 SB vulnerability in WinSCP

2023-12-2200:00:00
Kaspersky Lab
threats.kaspersky.com
winscp
vulnerability
security bypass
exploits
kaspersky
cve-2023-48795
update

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.4

Confidence

Low

Security bypass vulnerability was found in WinSCP. Malicious users can remotely exploit this vulnerability to bypass security restrictions.

Original advisories

Changes in WinSCP 6.2.2

Exploitation

Public exploits exist for this vulnerability.

Related products

WinSCP

CVE list

CVE-2023-48795 high

Solution

Update to the latest version

Download WinSCP

Impacts

  • SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

  • WinSCP earlier than 6.2.2

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.4

Confidence

Low