PT-2023-30401 · Thegreenbow · Thegreenbow Windows Enterprise Certified Vpn Client+2

Published 2023-12-19 · Updated 2025-12-17 · CVE-2023-47267

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TheGreenBow Windows Enterprise Certified VPN Client version 6.52 TheGreenBow Windows Standard VPN Client version 6.87 TheGreenBow Windows Enterprise VPN Client version 6.87

Description An issue discovered in TheGreenBow VPN clients allows attackers to gain escalated privileges via crafted changes to memory mapped file.

Recommendations For TheGreenBow Windows Enterprise Certified VPN Client version 6.52, consider applying configuration changes to restrict access to memory mapped files until a patch is available. For TheGreenBow Windows Standard VPN Client version 6.87, restrict access to memory mapped files to minimize the risk of exploitation. For TheGreenBow Windows Enterprise VPN Client version 6.87, consider disabling the functionality that allows changes to memory mapped files as a temporary workaround until a patch is available.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2023-47267

Affected Products

Thegreenbow Windows Enterprise Certified Vpn Client

Thegreenbow Windows Enterprise Vpn Client

Thegreenbow Windows Standard Vpn Client

References · 8

• https://osv.dev/vulnerability/CVE-2023-47267 · Vendor Advisory
• https://thegreenbow.com/en/support/security-alerts/#deeplink-16093 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-47267 · Security Note
• https://twitter.com/VulmonFeeds/status/1737256268660719840 · Twitter Post
• https://t.me/cveNotify/146103 · Telegram Post
• https://t.me/cvenotify/64281 · Telegram Post
• https://twitter.com/CVEnew/status/1737225676694978792 · Twitter Post
• https://t.me/cvenotify/65558 · Telegram Post