CVE-2023-31468

2023-09-1100:00:00

mitre

github.com

inosoft visiwin

weak permissions

trojan horse

fixed version

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

35.4%

SSVC

Exploitation

poc

Automatable

Technical Impact

total

JSON

An issue was discovered in Inosoft VisiWin 7 through 2022-2.1 (Runtime RT7.3 RC3 20221209.5). The “%PROGRAMFILES(X86)%\INOSOFT GmbH” folder has weak permissions for Everyone, allowing an attacker to insert a Trojan horse file that runs as SYSTEM. 2024-1 is a fixed version.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:inosoft:visiwin_7:*:*:*:*:*:*:*:*"
    ],
    "vendor": "inosoft",
    "product": "visiwin_7",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2024-1",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]