PT-2023-30811 · Unknown · Jcicsecuritytool

Angelboy · Published 2023-12-15 · Updated 2024-10-14 · CVE-2023-48387

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions JCICSecurityTool (affected versions not specified)

Description The issue arises from the JCICSecurityTool's failure to check the source website and access locations when executing multiple Registry-related functions. If a user, who has completed identity verification, browses a malicious webpage, an attacker can exploit this to read or modify any registry file under HKEY CURRENT USER, achieving remote code execution. The tool's Registry-related functions also have insufficient filtering for special characters, allowing an unauthenticated remote attacker to inject malicious scripts into a webpage.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-940

Related Identifiers

CVE-2023-48387

Affected Products

Jcicsecuritytool

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2023-48387 · Security Note
• https://osv.dev/vulnerability/CVE-2023-48387 · Vendor Advisory
• https://t.me/cvenotify/69285 · Telegram Post
• https://t.me/cvenotify/96964 · Telegram Post
• https://twitter.com/CVEnew/status/1735583549795750205 · Twitter Post
• https://twcert.org.tw/tw/cp-132-7602-a47a2-1.html · Note
• https://t.me/cvenotify/97968 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1735626999215906895 · Twitter Post