Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-4516
HistorySep 14, 2023 - 9:15 a.m.

Authentication flaw

2023-09-1409:15:00
PRIOn knowledge base
www.prio-n.com
2
igss update service
authentication flaw
local attacker
remote code execution
cwe-306
missing authentication
critical function vulnerability
nvd

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.3%

A CWE-306: Missing Authentication for Critical Function vulnerability exists in the IGSS Update
Service that could allow a local attacker to change update source, potentially leading to remote
code execution when the attacker force an update containing malicious content.

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.3%

Related for PRION:CVE-2023-4516