Lucene search

[email protected]NVD:CVE-2023-50441

HistoryDec 13, 2023 - 8:15 p.m.

CVE-2023-50441

2023-12-1320:15:49

[email protected]

web.nvd.nist.gov

encryption

vulnerability

windows

outbound network traffic

unc reference

modification

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

21.9%

JSON

Encrypted folders created by PRIMX ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification submission) or ZONECENTRAL for Windows before 2023.5 can be modified by an unauthenticated attacker to include a UNC reference so that it could trigger outbound network traffic from computers on which folders are opened.

Affected configurations

Nvd

Node

primxzonecentralRange<q.2021.2windows

primxzonecentralRange2023.0–2023.5windows

VendorProductVersionCPE
primxzonecentral*cpe:2.3:a:primx:zonecentral:*:*:*:*:*:windows:*:*

Vendor	Product	Version	CPE
primx	zonecentral	*	cpe:2.3:a:primx:zonecentral::::::windows::*

References

www.primx.eu/en/bulletins/security-bulletin-23B3093A/

www.primx.eu/fr/blog/

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

21.9%

JSON

Related for NVD:CVE-2023-50441

prion1 cvelist1 cve1