CVE-2022-23763 — HIGH (7.8)

Q: How severe is CVE-2022-23763?

CVE-2022-23763 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2022-23763?

Check the references section above for vendor advisories and patch information. Affected products include: Douzone Neors, Microsoft Windows.

Vulnerability Description

Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and execute arbitrary files. Remote attackers can use this vulerability to encourage users to access crafted web pages, causing damage such as malicious code infections.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Douzone	Neors	< 2021.3.10.1
Microsoft	Windows	-

Related Weaknesses (CWE)

CWE-346

References

https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66788Third Party Advisory
https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66788Third Party Advisory

FAQ

What is CVE-2022-23763?

CVE-2022-23763 is a vulnerability with a CVSS score of 7.8 (HIGH). Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and execute arbitrary files. Remote attackers can use this vulerability to encourage users to access crafte...

How severe is CVE-2022-23763?

CVE-2022-23763 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-23763?

Check the references section above for vendor advisories and patch information. Affected products include: Douzone Neors, Microsoft Windows.