Lucene search
PRIOn knowledge basePRION:CVE-2023-48387HistoryDec 15, 2023 - 9:15 a.m.
Remote code execution
2023-12-1509:15:00
PRIOn knowledge base
www.prio-n.com
7
remote code execution
twca
jcicsecuritytool
registry-related functions
identity verification
malicious webpage
vulnerability
TAIWAN-CA(TWCA) JCICSecurityTool fails to check the source website and access locations when executing multiple Registry-related functions. In the scenario where a user is using the JCICSecurityTool and has completed identity verification, if the user browses a malicious webpage created by an attacker, the attacker can exploit this vulnerability to read or modify any registry file under HKEY_CURRENT_USER, thereby achieving remote code execution.
| CPE | Name | Operator | Version |
|---|---|---|---|
| jcicsecuritytool | eq | 4.2.3.32 |
Related
nvd
nvd
CVE-2023-48387
2023-12-15 09:15:08
cve
cve
CVE-2023-48387
2023-12-15 09:15:08
cvelist
cvelist
CVE-2023-48387 TAIWAN-CA(TWCA) JCICSecurityTool - Improper Input Validation
2023-12-15 08:40:34