PT-2023-31408 · Nextbx · Nextbx Qwalerter

Phx · CVE-2023-4991 · Published 2023-09-15 · Updated 2024-05-17

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NextBX QWAlerter version 4.50

Description A critical issue was found in the software, affecting some unknown functionality of the file QWAlerter.exe. The manipulation leads to an unquoted search path, allowing an attack to be launched on the local host.

Recommendations For NextBX QWAlerter version 4.50, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2023-4991

Affected Products

Nextbx Qwalerter

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-4991 · Security Note
• https://osv.dev/vulnerability/CVE-2023-4991 · Vendor Advisory
• https://vuldb.com/?ctiid.239804 · Note
• https://vuldb.com/?id.239804 · Note