9.8

CVE-2023-47267

An issue discovered in TheGreenBow Windows Enterprise Certified VPN Client 6.52, Windows Standard VPN Client 6.87, and Windows Enterprise VPN Client 6.87 allows attackers to gain escalated privileges via crafted changes to memory mapped file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Thegreenbow ≫ Thegreenbow Vpn Client SwEdition enterprise_certified SwPlatform windows Version >= 6.52.004 < 6.52.006
Thegreenbow ≫ Thegreenbow Vpn Client SwEdition standard SwPlatform windows Version >= 6.87.001 < 6.87.108
Thegreenbow ≫ Thegreenbow Vpn Client SwEdition enterprise SwPlatform windows Version >= 6.87.001 < 6.87.109
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.75% 0.501
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

https://www.thegreenbow.com/en/support/security-alerts/#deeplink-16093
Vendor Advisory