PT-2023-23363 · Seqrite · Seqrite Endpoint Security

0Xinfection · Publicado 2023-05-11 · Atualizado 2023-05-22 · CVE-2023-31497

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Seqrite Endpoint Security (EPS) versions prior to 8.0

Description The issue is related to incorrect access control, allowing attackers to escalate privileges to root by supplying a crafted binary to the target system.

Recommendations For Seqrite Endpoint Security (EPS) versions prior to 8.0, update to version 8.0 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2023-31497

Produtos afetados

Seqrite Endpoint Security

Referências · 4

• 🔥 https://github.com/0xInfection/EPScalate · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-31497 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-31497 · Aviso do Fabricante
• https://t.me/cibsecurity/63924 · Publicação no Telegram