PT-2023-23363 · Seqrite · Seqrite Endpoint Security

0Xinfection · Published 2023-05-11 · Updated 2023-05-22 · CVE-2023-31497

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Seqrite Endpoint Security (EPS) versions prior to 8.0

Description The issue is related to incorrect access control, allowing attackers to escalate privileges to root by supplying a crafted binary to the target system.

Recommendations For Seqrite Endpoint Security (EPS) versions prior to 8.0, update to version 8.0 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2023-31497

Affected Products

Seqrite Endpoint Security

References · 4

• 🔥 https://github.com/0xInfection/EPScalate · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-31497 · Security Note
• https://osv.dev/vulnerability/CVE-2023-31497 · Vendor Advisory
• https://t.me/cibsecurity/63924 · Telegram Post