PT-2023-29693 · Xmlsoft · Mlsoft Tco!Stream

Song Tae-Hyun · Published 2023-10-30 · Updated 2023-11-08 · CVE-2023-45799

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MLSoft TCO!stream versions 8.0.22.1115 and below

Description A vulnerability exists in MLSoft TCO!stream due to insufficient permission validation, allowing an attacker to make the victim download and execute arbitrary files.

Recommendations For MLSoft TCO!stream versions 8.0.22.1115 and below, update to a version above 8.0.22.1115 to resolve the issue. As a temporary workaround, consider restricting access to sensitive features that may be exploited due to insufficient permission validation until a patch is available.

Fix

Weakness Enumeration

CWE-494

Related Identifiers

CVE-2023-45799

Affected Products

Mlsoft Tco!Stream

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-45799 · Security Note
• https://osv.dev/vulnerability/CVE-2023-45799 · Vendor Advisory
• https://t.me/cibsecurity/73125 · Telegram Post
• https://boho.or.kr/kr/bbs/view.do?bbsId=B0000133&nttId=71008&menuNo=205020 · Note
• https://t.me/cvenotify/60170 · Telegram Post
• https://twitter.com/cracbot/status/1719442312877469862 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1718938269918937289 · Twitter Post