5.5
CVE-2023-51654
- EPSS 0.03%
- Veröffentlicht 26.12.2023 06:15:07
- Zuletzt bearbeitet 21.11.2024 08:38:32
- Quelle vultures@jpcert.or.jp
- Teams Watchlist Login
- Unerledigt Login
Improper link resolution before file access ('Link Following') issue exists in iPrint&Scan Desktop for Windows versions 11.0.0 and earlier. A symlink attack by a malicious user may cause a Denial-of-service (DoS) condition on the PC.Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Brother ≫ Iprint&scan SwPlatformwindows Version <= 11.0.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.03% | 0.057 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
CWE-59 Improper Link Resolution Before File Access ('Link Following')
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.