CVE-2023-39341

LOW

3.3

Descricao

"FFRI yarai", "FFRI yarai Home and Business Edition" and their OEM products handle exceptional conditions improperly, which may lead to denial-of-service (DoS) condition. Affected products and versions are as follows: FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0, FFRI yarai Home and Business Edition version 1.4.0, InfoTrace Mark II Malware Protection (Mark II Zerona) versions 3.0.1 to 3.2.2, Zerona / Zerona PLUS versions 3.2.32 to 3.2.36, ActSecure χ versions 3.4.0 to 3.4.6 and 3.5.0, Dual Safe Powered by FFRI yarai version 1.4.1, EDR Plus Pack (Bundled FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0), and EDR Plus Pack Cloud (Bundled FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0).

Detalhes CVE

Pontuacao CVSS v3.13.3

SeveridadeLOW

Vetor CVSSCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Vetor de ataqueLOCAL

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioREQUIRED

Publicado8/9/2023

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

ffri:dual_safeffri:ffri_yarainec:actsecure_x_managed_security_serviceskygroup:edr_plus_packskygroup:edr_plus_pack_cloudsoliton:infotrace_mark_ii_malware_protectionsoliton:zeronasoliton:zerona_plus

Fraquezas (CWE)

CWE-755

Referencias

https://jvn.jp/en/jp/JVN42527152/(vultures@jpcert.or.jp)

https://www.ffri.jp/security-info/index.htm(vultures@jpcert.or.jp)

https://www.skyseaclientview.net/news/230807_01/(vultures@jpcert.or.jp)

https://www.soliton.co.jp/support/zerona_notice_2023.html(vultures@jpcert.or.jp)

https://www.sourcenext.com/support/i/2023/230718_01(vultures@jpcert.or.jp)

https://www.support.nec.co.jp/View.aspx?id=3140109240(vultures@jpcert.or.jp)

https://jvn.jp/en/jp/JVN42527152/(af854a3a-2127-422b-91ae-364da2661108)

https://www.ffri.jp/security-info/index.htm(af854a3a-2127-422b-91ae-364da2661108)

https://www.skyseaclientview.net/news/230807_01/(af854a3a-2127-422b-91ae-364da2661108)

https://www.soliton.co.jp/support/zerona_notice_2023.html(af854a3a-2127-422b-91ae-364da2661108)

https://www.sourcenext.com/support/i/2023/230718_01(af854a3a-2127-422b-91ae-364da2661108)

https://www.support.nec.co.jp/View.aspx?id=3140109240(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.