CVE-2023-40253
6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
Summary
Improper Authentication vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Authentication Abuse.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through V5.0.42 (Revision 117460); Genian NAC Suite V5.0: from V5.0.0 through V5.0.54; Genian ZTNA: from V6.0.0 through V6.0.15.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Genians | Genian NAC V4.0 | V4.0.0 <= V4.0.155 | affected |
| Genians | Genian NAC V5.0 | V5.0.0 <= V5.0.42 (Revision 117460) | affected |
| Genians | Genian NAC Suite V5.0 | V5.0.0 <= V5.0.54 | affected |
| Genians | Genian ZTNA | V6.0.0 <= V6.0.15 | affected |
Weaknesses
- CWE-78: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
ADP Enrichment
CVE Program Container
Additional References
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.