1. Home
  2. CVE Database
  3. CVE-2023-49312
CRITICAL · 9.1

CVE-2023-49312

Precision Bridge PrecisionBridge.exe (aka the thick client) before 7.3.21 allows an integrity violation in which the same license key is used on multiple systems, via vectors involving a Process Hacke...

Vulnerability Description

Precision Bridge PrecisionBridge.exe (aka the thick client) before 7.3.21 allows an integrity violation in which the same license key is used on multiple systems, via vectors involving a Process Hacker memory dump, error message inspection, and modification of a MAC address.

CVSS Score

9.1

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
PrecisionbridgePrecision Bridge< 7.3.21

Related Weaknesses (CWE)

CWE-295

References

FAQ

What is CVE-2023-49312?

CVE-2023-49312 is a vulnerability with a CVSS score of 9.1 (CRITICAL). Precision Bridge PrecisionBridge.exe (aka the thick client) before 7.3.21 allows an integrity violation in which the same license key is used on multiple systems, via vectors involving a Process Hacke...

How severe is CVE-2023-49312?

CVE-2023-49312 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2023-49312?

Check the references section above for vendor advisories and patch information. Affected products include: Precisionbridge Precision Bridge.