PT-2023-20996 · Unknown · Dualspace Super Secuirty

Published 2023-04-11 · Updated 2023-04-20 · CVE-2023-27192

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DUALSPACE Super Secuirty version 2.3.7

Description An issue in DUALSPACE Super Secuirty allows an attacker to cause a denial of service via the key wifi safe net check url, KEY Cirus scan whitelist, and KEY AD NEW USER AVOID TIME parameters.

Recommendations For version 2.3.7, consider restricting the use of the key wifi safe net check url, KEY Cirus scan whitelist, and KEY AD NEW USER AVOID TIME parameters to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-27192

Affected Products

Dualspace Super Secuirty

References · 7

• 🔥 https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27192/CVE%20detail.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-27192 · Security Note
• https://osv.dev/vulnerability/CVE-2023-27192 · Vendor Advisory
• https://t.me/cibsecurity/61873 · Telegram Post
• https://apkpure.com/cn/super-security-virus-cleaner/com.ludashi.security · Note
• https://t.me/cvenotify/47998 · Telegram Post
• http://dualspace.com/pc/en/products.html · Note