PT-2022-16250 · Neors · Neors

Published 2022-06-28 · Updated 2022-07-11 · CVE-2022-23763

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NeoRS (affected versions not specified)

Description The issue is related to an origin validation error vulnerability in NeoRS's ActiveX module, which allows attackers to download and execute arbitrary files. Remote attackers can exploit this to encourage users to access crafted web pages, resulting in damage such as malicious code infections.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Origin Validation Error

Weakness Enumeration

CWE-346

Related Identifiers

CVE-2022-23763

Affected Products

Neors

References · 6

• https://osv.dev/vulnerability/CVE-2022-23763 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23763 · Security Note
• https://t.me/cvenotify/32887 · Telegram Post
• https://t.me/cvenotify/32287 · Telegram Post
• https://t.me/cibsecurity/45302 · Telegram Post
• https://krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66788 · Note