CVE-2023-47267

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-47267
An issue discovered in TheGreenBow Windows Enterprise Certified VPN Client 6.52, Windows Standard VPN Client 6.87, and Windows Enterprise VPN Client 6.87 allows attackers to gain escalated privileges via crafted changes to memory mapped file.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.thegreenbow.com/en/support/security-alerts/#deeplink-16093 Vendor Advisory
https://www.thegreenbow.com/en/support/security-alerts/#deeplink-16093 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:thegreenbow:windows_enterprise_certified_vpn:6.52:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:thegreenbow:windows_standard_vpn:6.87:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:a:thegreenbow:windows_enterprise_vpn:6.87:*:*:*:*:*:*:*
History

21 Nov 2024, 08:30

Type Values Removed Values Added
References () https://www.thegreenbow.com/en/support/security-alerts/#deeplink-16093 - Vendor Advisory () https://www.thegreenbow.com/en/support/security-alerts/#deeplink-16093 - Vendor Advisory

29 Dec 2023, 03:11

Type Values Removed Values Added
CPE cpe:2.3:a:thegreenbow:windows_standard_vpn:6.87:*:*:*:*:*:*:*
cpe:2.3:a:thegreenbow:windows_enterprise_vpn:6.87:*:*:*:*:*:*:*
cpe:2.3:a:thegreenbow:windows_enterprise_certified_vpn:6.52:*:*:*:*:*:*:*
References () https://www.thegreenbow.com/en/support/security-alerts/#deeplink-16093 - () https://www.thegreenbow.com/en/support/security-alerts/#deeplink-16093 - Vendor Advisory
First Time Thegreenbow windows Standard Vpn
Thegreenbow windows Enterprise Certified Vpn
Thegreenbow
Thegreenbow windows Enterprise Vpn
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8
CWE CWE-269

20 Dec 2023, 13:50

Type Values Removed Values Added
Summary
  • (es) Un problema descubierto en TheGreenBow Windows Enterprise Certified VPN Client 6.52, Windows Standard VPN Client 6.87 y Windows Enterprise VPN Client 6.87 permite a los atacantes obtener privilegios aumentados mediante cambios elaborados en el archivo asignado en memoria.

19 Dec 2023, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-12-19 22:15

Updated : 2024-11-21 08:30

NVD link : CVE-2023-47267

Mitre link : CVE-2023-47267

CVE.ORG link : CVE-2023-47267

JSON object : View

Products Affected

thegreenbow

  • windows_enterprise_certified_vpn
  • windows_enterprise_vpn
  • windows_standard_vpn
CWE
CWE-269

Improper Privilege Management