Lucene search

K
nvd[email protected]NVD:CVE-2023-38351
HistorySep 19, 2023 - 4:15 p.m.

CVE-2023-38351

2023-09-1916:15:10
CWE-295
web.nvd.nist.gov
2
minitool partition wizard
cve-2023-38351
man in the middle attack
remote code execution

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

57.3%

MiniTool Partition Wizard 12.8 contains an insecure installation mechanism that allows attackers to achieve remote code execution through a man in the middle attack.

Affected configurations

Nvd
Node
minitoolpartition_wizardMatch12.8
VendorProductVersionCPE
minitoolpartition_wizard12.8cpe:2.3:a:minitool:partition_wizard:12.8:*:*:*:*:*:*:*

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

57.3%

Related for NVD:CVE-2023-38351