PT-2023-25661 · Opswat · Opswat Metadefender Kiosk

Published 2023-09-14 · Updated 2023-10-03 · CVE-2023-36658

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OPSWAT MetaDefender KIOSK version 4.6.1.9996

Description An issue was discovered in OPSWAT MetaDefender KIOSK. It has an unquoted service path that can be abused locally.

Recommendations For OPSWAT MetaDefender KIOSK version 4.6.1.9996, consider updating to a newer version that addresses the unquoted service path issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2023-36658

Affected Products

Opswat Metadefender Kiosk

References · 7

• https://osv.dev/vulnerability/CVE-2023-36658 · Vendor Advisory
• https://docs.opswat.com/mdkiosk/release-notes/cve-2023-36658 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-36658 · Security Note
• https://docs.opswat.com/mdkiosk · Note
• https://t.me/cibsecurity/70589 · Telegram Post
• https://twitter.com/CVEnew/status/1702551382044057977 · Twitter Post
• https://t.me/cvenotify/58938 · Telegram Post