PT-2024-14255 · Regify · Regify Regipay Client For Windows

Dominique Righetto · Published 2024-01-24 · Updated 2024-01-30 · CVE-2023-51711

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Regify Regipay Client for Windows version 4.5.1.0

Description An issue was discovered in Regify Regipay Client for Windows that allows DLL hijacking, enabling a user to trigger the execution of arbitrary code every time the product is executed. This issue can lead to the execution of malicious code, potentially compromising the system.

Recommendations For Regify Regipay Client for Windows version 4.5.1.0, consider disabling the execution of the product until a patch is available to prevent the exploitation of this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2023-51711

Affected Products

Regify Regipay Client For Windows

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2023-51711 · Security Note
• https://osv.dev/vulnerability/CVE-2023-51711 · Vendor Advisory
• https://twitter.com/CVEnew/status/1750054617268793556 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1750122175657316841 · Twitter Post
• https://t.me/cvenotify/68479 · Telegram Post
• https://excellium-services.com/cert-xlm-advisory/cve-2023-51711 · Note
• https://t.me/cvenotify/69258 · Telegram Post
• https://cds.thalesgroup.com/en/tcs-cert/CVE-2023-51711 · Note