PT-2023-7053 · Microsoft · Host Integration Server 2020

Bee13Oy · Publicado 2023-11-14 · Atualizado 2025-12-31 · CVE-2023-38151

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Host Integration Server 2020

Description The issue is related to insufficient input validation in the Microsoft Host Integration Server application. This can be exploited by a remote attacker to execute arbitrary code.

Recommendations For Microsoft Host Integration Server 2020, update to a version that includes the fix for this issue, as no specific workaround is provided.

Correção

Use of Uninitialized Resource

RCE

Enumeração de Fraquezas

CWE-908

CWE-20

Identificadores relacionados

BDU:2023-08075

CVE-2023-38151

Produtos afetados

Host Integration Server 2020

Referências · 6

• https://twitter.com/dailycve/status/2006494626262536425 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-38151 · Nota de Segurança
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38151 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-38151 · Aviso do Fabricante
• https://safe-surf.ru/upload/VULN-new/VULN.2023-11-17.1.pdf · Nota de Segurança
• https://bdu.fstec.ru/vul/2023-08075 · Nota de Segurança