PT-2023-29693 · Xmlsoft · Mlsoft Tco!Stream

Song Tae-Hyun · Publicado 2023-10-30 · Atualizado 2023-11-08 · CVE-2023-45799

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MLSoft TCO!stream versions 8.0.22.1115 and below

Description A vulnerability exists in MLSoft TCO!stream due to insufficient permission validation, allowing an attacker to make the victim download and execute arbitrary files.

Recommendations For MLSoft TCO!stream versions 8.0.22.1115 and below, update to a version above 8.0.22.1115 to resolve the issue. As a temporary workaround, consider restricting access to sensitive features that may be exploited due to insufficient permission validation until a patch is available.

Correção

Enumeração de Fraquezas

CWE-494

Identificadores relacionados

CVE-2023-45799

Produtos afetados

Mlsoft Tco!Stream

Referências · 7

• https://t.me/cibsecurity/73125 · Publicação no Telegram
• https://boho.or.kr/kr/bbs/view.do?bbsId=B0000133&nttId=71008&menuNo=205020 · Nota
• https://t.me/cvenotify/60170 · Publicação no Telegram
• https://twitter.com/cracbot/status/1719442312877469862 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/1718938269918937289 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-45799 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-45799 · Aviso do Fabricante