{ "schemaVersion": "1.0", "publisher": "脆弱性ナビ", "origin": "https://zeijaku.ittrip.xyz", "terms": [ { "name": "CVE Program", "url": "https://www.cve.org/legal/termsofuse", "notice": "CVE content is used subject to the CVE Program Terms of Use. CVE is a trademark of The MITRE Corporation.", "licenseText": "CVE content: Copyright The MITRE Corporation. CVE is a trademark of The MITRE Corporation.\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nDisclaimers: ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE." }, { "name": "NIST NVD", "url": "https://nvd.nist.gov/general/faq", "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD." }, { "name": "JVN", "url": "https://jvn.jp/contact/index.html", "notice": "出典：JVN（JPCERT/CC・IPA）。原文は各レコードの参照先を確認してください。" }, { "name": "CISA KEV", "url": "https://github.com/cisagov/kev-data", "notice": "Known Exploited Vulnerabilities catalog, CISA. CC0." } ], "records": [ { "id": "CVE-2023-40044", "aliases": [], "title": "WS_FTP Server：脆弱性情報", "summary": "WS_FTP Server の Ad Hoc Transfer モジュールに .NET デシリアライズの脆弱性があり、認証前または認証済みの攻撃者がリモートコマンドを実行できる可能性がある。", "risk": "攻撃者がサーバーのオペレーティングシステム上で任意のコマンドを実行できる。", "product": "WS_FTP Server", "category": "other", "component": "package", "severity": "critical", "cvss": 10, "cvssVersion": "3.1", "cvssSource": "ProgressSoftware", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "affected": [ { "product": "WS_FTP Server", "range": ">= 8.8.0 / < 8.8.2（機能: Ad Hoc Transfer Module）" }, { "product": "WS_FTP Server", "range": ">= 8.7.0 / < 8.7.4（機能: Ad Hoc Transfer Module）" }, { "product": "WS_FTP Server", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。（機能: Ad Hoc Transfer Module）" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止する。", "「CVE-2023-40044」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/40xxx/CVE-2023-40044.json", "label": "CVE：ProgressSoftware" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-40044", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-40044", "label": "CVE公式レコード" }, { "url": "https://www.progress.com/ws_ftp", "label": "CVE掲載の参考情報" }, { "url": "https://community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2023", "label": "CISAが示す関連情報" }, { "url": "https://www.theregister.com/2023/10/02/ws_ftp_update/", "label": "CVE掲載の参考情報" }, { "url": "https://www.rapid7.com/blog/post/2023/09/29/etr-critical-vulnerabilities-in-ws_ftp-server/", "label": "CVE掲載の参考情報" }, { "url": "https://attackerkb.com/topics/bn32f9sNax/cve-2023-40044", "label": "CVE掲載の参考情報" }, { "url": "https://censys.com/cve-2023-40044/", "label": "CVE掲載の参考情報" }, { "url": "https://www.assetnote.io/resources/research/rce-in-progress-ws-ftp-ad-hoc-via-iis-http-modules-cve-2023-40044", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/174917/Progress-Software-WS_FTP-Unauthenticated-Remote-Code-Execution.html", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-40044", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-09-27T14:48:08.190Z", "modifiedAt": "2025-10-21T23:05:36.645Z", "fetchedAt": "2026-10-24T08:05:07.125Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.", "sourceTitle": "WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "affected", "modules": [ "Ad Hoc Transfer Module" ], "product": "WS_FTP Server", "vendor": "Progress Software Corporation", "versions": [ { "lessThan": "8.8.2", "status": "affected", "version": "8.8.0", "versionType": "semver" }, { "lessThan": "8.7.4", "status": "affected", "version": "8.7.0", "versionType": "semver" } ] } ], "configurationNotes": "対象環境・機能: Ad Hoc Transfer Module。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-40044", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/40xxx/CVE-2023-40044.json", "fetchedAt": "2026-10-24T08:05:07.125Z", "publishedAt": "2023-09-27T14:48:08.190Z", "modifiedAt": "2025-10-21T23:05:36.645Z", "state": "published", "provider": "ProgressSoftware", "title": "WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability", "descriptions": [ { "lang": "en", "value": "In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Progress WS_FTP Server contains a deserialization of untrusted data vulnerability in the Ad Hoc Transfer module that allows an authenticated attacker to execute remote commands on the underlying operating system.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-40044", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Progress Software Corporation", "product": "WS_FTP Server", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "affected", "platforms": [], "modules": [ "Ad Hoc Transfer Module" ], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "8.8.0", "lessThan": "8.8.2", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "8.7.0", "lessThan": "8.7.4", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-502", "lang": "en", "description": "CWE-502 Deserialization of Untrusted Data", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "baseScore": 10, "baseSeverity": "CRITICAL", "provider": "ProgressSoftware", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.progress.com/ws_ftp", "label": "CVE", "tags": [ "product", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2023", "label": "CVE", "tags": [ "vendor-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://www.theregister.com/2023/10/02/ws_ftp_update/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://www.rapid7.com/blog/post/2023/09/29/etr-critical-vulnerabilities-in-ws_ftp-server/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "https://attackerkb.com/topics/bn32f9sNax/cve-2023-40044", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/4" }, { "url": "https://censys.com/cve-2023-40044/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/5" }, { "url": "https://www.assetnote.io/resources/research/rce-in-progress-ws-ftp-ad-hoc-via-iis-http-modules-cve-2023-40044", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/6" }, { "url": "http://packetstormsecurity.com/files/174917/Progress-Software-WS_FTP-Unauthenticated-Remote-Code-Execution.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/7" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-40044", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/40xxx/CVE-2023-40044.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"affected\",\"modules\":[\"Ad Hoc Transfer Module\"],\"product\":\"WS_FTP Server\",\"vendor\":\"Progress Software Corporation\",\"versions\":[{\"lessThan\":\"8.8.2\",\"status\":\"affected\",\"version\":\"8.8.0\",\"versionType\":\"semver\"},{\"lessThan\":\"8.7.4\",\"status\":\"affected\",\"version\":\"8.7.0\",\"versionType\":\"semver\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/40xxx/CVE-2023-40044.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/40xxx/CVE-2023-40044.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-502\",\"description\":\"CWE-502 Deserialization of Untrusted Data\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/40xxx/CVE-2023-40044.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":10,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"CHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-40044:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-40044", "sourcePath": "retained:/originalText", "text": "Progress WS_FTP Server contains a deserialization of untrusted data vulnerability in the Ad Hoc Transfer module that allows an authenticated attacker to execute remote commands on the underlying operating system.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-40044:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-40044", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-40044", "modifiedAt": "2023-10-05T00:00:00.000Z", "fetchedAt": "2026-10-24T07:17:50.339Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:36.645Z", "fetchedAt": "2026-10-24T08:05:07.125Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-10-05T00:00:00.000Z", "fetchedAt": "2026-10-24T07:17:50.339Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "WS_FTP Serverに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T08:05:07.125Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "1e23cfe0d26cc37c20755f29c341b7d3edac237b754e17514890e2b1c9fbc6f2", "sourceModifiedAt": "2025-10-21T23:05:36.645Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "WS_FTP Server の Ad Hoc Transfer モジュールに .NET デシリアライズの脆弱性があり、認証前または認証済みの攻撃者がリモートコマンドを実行できる可能性がある。", "risk": "攻撃者がサーバーのオペレーティングシステム上で任意のコマンドを実行できる。", "summaryEvidenceIds": [ "E1", "E2", "E3" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "S2 の記載では、攻撃者は認証前（pre‑authenticated）であるとされている。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/40xxx/CVE-2023-40044.json" ], "evidenceIds": [ "E1", "E3" ] }, { "text": "S4 の記載では、攻撃者は認証済み（authenticated）であるとされている。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-40044", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/40xxx/CVE-2023-40044.json" ], "evidenceIds": [ "E2", "E3" ] }, { "text": "影響は WS_FTP Server の Ad Hoc Transfer モジュールに限定される。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/40xxx/CVE-2023-40044.json" ], "evidenceIds": [ "E4", "E3" ] }, { "text": "公式の対象表：Progress Software Corporation / WS_FTP Server。影響ありとして記載：8.8.0以上、8.8.2未満。影響ありとして記載：8.7.0以上、8.7.4未満。対象の機能：Ad Hoc Transfer Module。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/40xxx/CVE-2023-40044.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-40044" ], "evidenceIds": [ "E7" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/40xxx/CVE-2023-40044.json" ], "evidenceIds": [ "E4" ] }, { "text": "「WS_FTP Server」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-40044", "https://www.progress.com/ws_ftp", "https://community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2023", "https://www.theregister.com/2023/10/02/ws_ftp_update/", "https://www.rapid7.com/blog/post/2023/09/29/etr-critical-vulnerabilities-in-ws_ftp-server/", "https://attackerkb.com/topics/bn32f9sNax/cve-2023-40044", "https://censys.com/cve-2023-40044/", "https://www.assetnote.io/resources/research/rce-in-progress-ws-ftp-ad-hoc-via-iis-http-modules-cve-2023-40044", "http://packetstormsecurity.com/files/174917/Progress-Software-WS_FTP-Unauthenticated-Remote-Code-Execution.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-40044", "https://nvd.nist.gov/vuln/detail/CVE-2023-40044" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止する。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-40044" ], "evidenceIds": [ "E5", "E6" ] }, { "text": "「CVE-2023-40044」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-40044", "https://www.progress.com/ws_ftp", "https://community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2023", "https://www.theregister.com/2023/10/02/ws_ftp_update/", "https://www.rapid7.com/blog/post/2023/09/29/etr-critical-vulnerabilities-in-ws_ftp-server/", "https://attackerkb.com/topics/bn32f9sNax/cve-2023-40044", "https://censys.com/cve-2023-40044/", "https://www.assetnote.io/resources/research/rce-in-progress-ws-ftp-ad-hoc-via-iis-http-modules-cve-2023-40044", "http://packetstormsecurity.com/files/174917/Progress-Software-WS_FTP-Unauthenticated-Remote-Code-Execution.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-40044", "https://nvd.nist.gov/vuln/detail/CVE-2023-40044" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-40044", "https://www.progress.com/ws_ftp", "https://community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2023", "https://www.theregister.com/2023/10/02/ws_ftp_update/", "https://www.rapid7.com/blog/post/2023/09/29/etr-critical-vulnerabilities-in-ws_ftp-server/", "https://attackerkb.com/topics/bn32f9sNax/cve-2023-40044", "https://censys.com/cve-2023-40044/", "https://www.assetnote.io/resources/research/rce-in-progress-ws-ftp-ad-hoc-via-iis-http-modules-cve-2023-40044", "http://packetstormsecurity.com/files/174917/Progress-Software-WS_FTP-Unauthenticated-Remote-Code-Execution.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-40044", "https://nvd.nist.gov/vuln/detail/CVE-2023-40044" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-40044", "https://www.progress.com/ws_ftp", "https://community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2023", "https://www.theregister.com/2023/10/02/ws_ftp_update/", "https://www.rapid7.com/blog/post/2023/09/29/etr-critical-vulnerabilities-in-ws_ftp-server/", "https://attackerkb.com/topics/bn32f9sNax/cve-2023-40044", "https://censys.com/cve-2023-40044/", "https://www.assetnote.io/resources/research/rce-in-progress-ws-ftp-ad-hoc-via-iis-http-modules-cve-2023-40044", "http://packetstormsecurity.com/files/174917/Progress-Software-WS_FTP-Unauthenticated-Remote-Code-Execution.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-40044", "https://nvd.nist.gov/vuln/detail/CVE-2023-40044" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/40xxx/CVE-2023-40044.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-40044", "https://www.progress.com/ws_ftp", "https://community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2023", "https://www.theregister.com/2023/10/02/ws_ftp_update/", "https://www.rapid7.com/blog/post/2023/09/29/etr-critical-vulnerabilities-in-ws_ftp-server/", "https://attackerkb.com/topics/bn32f9sNax/cve-2023-40044", "https://censys.com/cve-2023-40044/", "https://www.assetnote.io/resources/research/rce-in-progress-ws-ftp-ad-hoc-via-iis-http-modules-cve-2023-40044", "http://packetstormsecurity.com/files/174917/Progress-Software-WS_FTP-Unauthenticated-Remote-Code-Execution.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-40044", "https://nvd.nist.gov/vuln/detail/CVE-2023-40044" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/40xxx/CVE-2023-40044.json", "label": "CVE：ProgressSoftware" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-40044", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-40044", "label": "CVE公式レコード" }, { "url": "https://www.progress.com/ws_ftp", "label": "CVE掲載の参考情報" }, { "url": "https://community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2023", "label": "CISAが示す関連情報" }, { "url": "https://www.theregister.com/2023/10/02/ws_ftp_update/", "label": "CVE掲載の参考情報" }, { "url": "https://www.rapid7.com/blog/post/2023/09/29/etr-critical-vulnerabilities-in-ws_ftp-server/", "label": "CVE掲載の参考情報" }, { "url": "https://attackerkb.com/topics/bn32f9sNax/cve-2023-40044", "label": "CVE掲載の参考情報" }, { "url": "https://censys.com/cve-2023-40044/", "label": "CVE掲載の参考情報" }, { "url": "https://www.assetnote.io/resources/research/rce-in-progress-ws-ftp-ad-hoc-via-iis-http-modules-cve-2023-40044", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/174917/Progress-Software-WS_FTP-Unauthenticated-Remote-Code-Execution.html", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-40044", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/40xxx/CVE-2023-40044.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-40044", "sourceField": "retained:/originalText", "excerpt": "Progress WS_FTP Server contains a deserialization of untrusted data vulnerability in the Ad Hoc Transfer module that allows an authenticated attacker to execute remote commands on the underlying operating system.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/40xxx/CVE-2023-40044.json", "sourceField": "/containers/cna/title", "excerpt": "WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability", "language": null }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/40xxx/CVE-2023-40044.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"affected\",\"modules\":[\"Ad Hoc Transfer Module\"],\"product\":\"WS_FTP Server\",\"vendor\":\"Progress Software Corporation\",\"versions\":[{\"lessThan\":\"8.8.2\",\"status\":\"affected\",\"version\":\"8.8.0\",\"versionType\":\"semver\"},{\"lessThan\":\"8.7.4\",\"status\":\"affected\",\"version\":\"8.7.0\",\"versionType\":\"semver\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-40044", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-40044", "sourceField": "/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null }, { "id": "E7", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-40044", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-40044\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-40044（WS_FTP Server）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・S2 の記載では、攻撃者は認証前（pre‑authenticated）であるとされている。\n・S4 の記載では、攻撃者は認証済み（authenticated）であるとされている。\n・影響は WS_FTP Server の Ad Hoc Transfer モジュールに限定される。\n・公式の対象表：Progress Software Corporation / WS_FTP Server。影響ありとして記載：8.8.0以上、8.8.2未満。影響ありとして記載：8.7.0以上、8.7.4未満。対象の機能：Ad Hoc Transfer Module。個別に例外が記されていない版も、原資料では影響ありとされています。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-40044", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T08:05:07.125Z", "lastSuccess": "2026-10-24T08:05:07.125Z", "sourceCheckedAt": "2026-10-24T08:05:07.125Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2023-42824", "aliases": [], "title": "iOS and iPadOS：脆弱性情報", "summary": "この問題は改善されたチェックにより対処され、iOS 16.7.1 と iPadOS 16.7.1 で修正されています。ローカル攻撃者が権限を昇格させる可能性があり、Apple は iOS 16.6 より前のバージョンでこの問題が実際に悪用されたとの報告を認識しています。", "risk": "ローカル攻撃者がデバイス上で権限を昇格させる可能性があります。", "product": "iOS and iPadOS", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "apple", "cvssVector": null, "affected": [ { "product": "iOS and iPadOS", "range": ">= unspecified / < 16.7" } ], "fixed": [], "steps": [ "iOS 16.7.1 または iPadOS 16.7.1 以降にアップデートしてください。", "「CVE-2023-42824」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42824.json", "label": "CVE：apple" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42824", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-42824", "label": "CVE公式レコード" }, { "url": "https://support.apple.com/en-us/HT213972", "label": "CVE掲載の参考情報" }, { "url": "https://support.apple.com/en-us/HT213961", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42824", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-10-04T18:02:20.884Z", "modifiedAt": "2025-11-04T19:22:01.229Z", "fetchedAt": "2026-10-25T05:32:55.762Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Apple", "product": "iOS and iPadOS", "versions": [ { "version": "unspecified", "status": "affected", "lessThan": "16.7", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-42824", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42824.json", "fetchedAt": "2026-10-25T05:32:55.762Z", "publishedAt": "2023-10-04T18:02:20.884Z", "modifiedAt": "2025-11-04T19:22:01.229Z", "state": "published", "provider": "apple", "title": "", "descriptions": [ { "lang": "en", "value": "The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Apple iOS and iPadOS contain an unspecified vulnerability that allows for local privilege escalation.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42824", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Apple", "product": "iOS and iPadOS", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "unspecified", "lessThan": "16.7", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6.", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://support.apple.com/en-us/HT213972", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://support.apple.com/kb/HT213972", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://support.apple.com/kb/HT213961", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-42824", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42824.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Apple\",\"product\":\"iOS and iPadOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"16.7\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42824.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42824.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6.\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42824.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-42824:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42824", "sourcePath": "retained:/originalText", "text": "Apple iOS and iPadOS contain an unspecified vulnerability that allows for local privilege escalation.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-42824:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42824", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42824", "modifiedAt": "2023-10-05T00:00:00.000Z", "fetchedAt": "2026-10-25T05:17:50.551Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-11-04T19:22:01.229Z", "fetchedAt": "2026-10-25T05:32:55.762Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-10-05T00:00:00.000Z", "fetchedAt": "2026-10-25T05:17:50.551Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "iOS and iPadOSに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-25T05:32:55.762Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "e7814b2fdfc51451270ab5180797a91fd8e885c4583dab401e937bcfa8f59162", "sourceModifiedAt": "2025-11-04T19:22:01.229Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "この問題は改善されたチェックにより対処され、iOS 16.7.1 と iPadOS 16.7.1 で修正されています。ローカル攻撃者が権限を昇格させる可能性があり、Apple は iOS 16.6 より前のバージョンでこの問題が実際に悪用されたとの報告を認識しています。", "risk": "ローカル攻撃者がデバイス上で権限を昇格させる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "ローカル（端末に直接）でアクセスできる攻撃者が対象です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42824.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Apple / iOS and iPadOS。影響ありとして記載：16.7未満（原資料では開始版が未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42824.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42824" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42824.json" ], "evidenceIds": [ "E3" ] }, { "text": "「iOS and iPadOS」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-42824", "https://support.apple.com/en-us/HT213972", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42824", "https://support.apple.com/en-us/HT213961", "https://nvd.nist.gov/vuln/detail/CVE-2023-42824" ] } ], "actions": [ { "text": "iOS 16.7.1 または iPadOS 16.7.1 以降にアップデートしてください。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42824.json" ], "evidenceIds": [ "E1" ] }, { "text": "「CVE-2023-42824」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-42824", "https://support.apple.com/en-us/HT213972", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42824", "https://support.apple.com/en-us/HT213961", "https://nvd.nist.gov/vuln/detail/CVE-2023-42824" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-42824", "https://support.apple.com/en-us/HT213972", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42824", "https://support.apple.com/en-us/HT213961", "https://nvd.nist.gov/vuln/detail/CVE-2023-42824" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-42824", "https://support.apple.com/en-us/HT213972", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42824", "https://support.apple.com/en-us/HT213961", "https://nvd.nist.gov/vuln/detail/CVE-2023-42824" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42824.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-42824", "https://support.apple.com/en-us/HT213972", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42824", "https://support.apple.com/en-us/HT213961", "https://nvd.nist.gov/vuln/detail/CVE-2023-42824" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42824.json", "label": "CVE：apple" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42824", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-42824", "label": "CVE公式レコード" }, { "url": "https://support.apple.com/en-us/HT213972", "label": "CVE掲載の参考情報" }, { "url": "https://support.apple.com/en-us/HT213961", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42824", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42824.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42824.json", "sourceField": "/containers/cna/problemTypes/0/descriptions/0", "excerpt": "{\"lang\":\"en\",\"description\":\"A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6.\"}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42824.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"iOS and iPadOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"16.7\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42824", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-42824\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-42824（iOS and iPadOS）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・ローカル（端末に直接）でアクセスできる攻撃者が対象です。\n・公式の対象表：Apple / iOS and iPadOS。影響ありとして記載：16.7未満（原資料では開始版が未指定）。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-42824", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-25T05:32:55.762Z", "lastSuccess": "2026-10-25T05:32:55.762Z", "sourceCheckedAt": "2026-10-25T05:32:55.762Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2023-28229", "aliases": [], "title": "Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows Server 2022 / Windows 10 Version 20H2 / Windows 11 version 21H2 / Windows 10 Version 21H2 / Windows 11 version 22H2 / Windows 10 Version 22H2 / W：権限の奪取", "summary": "Windows CNG キー分離サービスの特権昇格脆弱性", "risk": "攻撃者が限定的な SYSTEM 権限を取得できる可能性がある。", "product": "Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows Server 2022 / Windows 10 Version 20H2 / Windows 11 version 21H2 / Windows 10 Version 21H2 / Windows 11 version 22H2 / Windows 10 Version 22H2 / W", "category": "windows", "component": "package", "severity": "high", "cvss": 7, "cvssVersion": "3.1", "cvssSource": "microsoft", "cvssVector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "affected": [ { "product": "Windows 10 Version 1809", "range": ">= 10.0.17763.0 / < 10.0.17763.4252（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows 10 Version 1809", "range": ">= 10.0.0 / < 10.0.17763.4252（環境: ARM64-based Systems）" }, { "product": "Windows Server 2019", "range": ">= 10.0.17763.0 / < 10.0.17763.4252（環境: x64-based Systems）" }, { "product": "Windows Server 2019 (Server Core installation)", "range": ">= 10.0.17763.0 / < 10.0.17763.4252（環境: x64-based Systems）" }, { "product": "Windows Server 2022", "range": ">= 10.0.20348.0 / < 10.0.20348.1668（環境: x64-based Systems）" }, { "product": "Windows 10 Version 20H2", "range": ">= 10.0.0 / < 10.0.19042.2846（環境: 32-bit Systems / ARM64-based Systems）" }, { "product": "Windows 11 version 21H2", "range": ">= 10.0.0 / < 10.0.22000.1817（環境: x64-based Systems / ARM64-based Systems）" }, { "product": "Windows 10 Version 21H2", "range": ">= 10.0.19043.0 / < 10.0.19044.2846（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 version 22H2", "range": ">= 10.0.22621.0 / < 10.0.22621.1555（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 10 Version 22H2", "range": ">= 10.0.19045.0 / < 10.0.19045.2846（環境: x64-based Systems / ARM64-based Systems / 32-bit Systems）" }, { "product": "Windows 10 Version 1507", "range": ">= 10.0.10240.0 / < 10.0.10240.19869（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows 10 Version 1607", "range": ">= 10.0.14393.0 / < 10.0.14393.5850（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows Server 2016", "range": ">= 10.0.14393.0 / < 10.0.14393.5850（環境: x64-based Systems）" }, { "product": "Windows Server 2016 (Server Core installation)", "range": ">= 10.0.14393.0 / < 10.0.14393.5850（環境: x64-based Systems）" }, { "product": "Windows Server 2008 Service Pack 2", "range": ">= 6.0.6003.0 / < 6.0.6003.22015（環境: 32-bit Systems）" }, { "product": "Windows Server 2008 Service Pack 2 (Server Core installation)", "range": ">= 6.0.6003.0 / < 6.0.6003.22015（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows Server 2008 Service Pack 2", "range": ">= 6.0.6003.0 / < 6.0.6003.22015（環境: x64-based Systems）" }, { "product": "Windows Server 2008 R2 Service Pack 1", "range": ">= 6.1.7601.0 / < 6.1.7601.26466（環境: x64-based Systems）" }, { "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)", "range": ">= 6.1.7601.0 / < 6.1.7601.26466（環境: x64-based Systems）" }, { "product": "Windows Server 2012", "range": ">= 6.2.9200.0 / < 6.2.9200.24216（環境: x64-based Systems）" }, { "product": "Windows Server 2012 (Server Core installation)", "range": ">= 6.2.9200.0 / < 6.2.9200.24216（環境: x64-based Systems）" }, { "product": "Windows Server 2012 R2", "range": ">= 6.3.9600.0 / < 6.3.9600.20919（環境: x64-based Systems）" }, { "product": "Windows Server 2012 R2 (Server Core installation)", "range": ">= 6.3.9600.0 / < 6.3.9600.20919（環境: x64-based Systems）" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止する。", "「CVE-2023-28229」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28229", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-28229", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28229", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28229", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device", "label": "Microsoft公式：Windowsの情報を調べる" }, { "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "label": "Microsoft公式：Windows Updateの操作" } ], "publishedAt": "2023-04-11T19:13:37.417Z", "modifiedAt": "2025-10-21T23:05:49.303Z", "fetchedAt": "2026-10-25T05:32:58.665Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "", "sourceTitle": "Windows CNG Key Isolation Service Elevation of Privilege Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.4252", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "platforms": [ "ARM64-based Systems" ], "versions": [ { "version": "10.0.0", "lessThan": "10.0.17763.4252", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.4252", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.4252", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.20348.0", "lessThan": "10.0.20348.1668", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 20H2", "platforms": [ "32-bit Systems", "ARM64-based Systems" ], "versions": [ { "version": "10.0.0", "lessThan": "10.0.19042.2846", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 21H2", "platforms": [ "x64-based Systems", "ARM64-based Systems" ], "versions": [ { "version": "10.0.0", "lessThan": "10.0.22000.1817", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.19043.0", "lessThan": "10.0.19044.2846", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H2", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.22621.0", "lessThan": "10.0.22621.1555", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 22H2", "platforms": [ "x64-based Systems", "ARM64-based Systems", "32-bit Systems" ], "versions": [ { "version": "10.0.19045.0", "lessThan": "10.0.19045.2846", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1507", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.10240.0", "lessThan": "10.0.10240.19869", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1607", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.5850", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.5850", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.5850", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2", "platforms": [ "32-bit Systems" ], "versions": [ { "version": "6.0.6003.0", "lessThan": "6.0.6003.22015", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2 (Server Core installation)", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "6.0.6003.0", "lessThan": "6.0.6003.22015", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.0.6003.0", "lessThan": "6.0.6003.22015", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 R2 Service Pack 1", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.1.7601.0", "lessThan": "6.1.7601.26466", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.1.7601.0", "lessThan": "6.1.7601.26466", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.2.9200.0", "lessThan": "6.2.9200.24216", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.2.9200.0", "lessThan": "6.2.9200.24216", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.3.9600.0", "lessThan": "6.3.9600.20919", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.3.9600.0", "lessThan": "6.3.9600.20919", "versionType": "custom", "status": "affected" } ] } ], "configurationNotes": "対象環境・機能: 32-bit Systems / x64-based Systems / ARM64-based Systems。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-28229", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "fetchedAt": "2026-10-25T05:32:58.665Z", "publishedAt": "2023-04-11T19:13:37.417Z", "modifiedAt": "2025-10-21T23:05:49.303Z", "state": "published", "provider": "microsoft", "title": "Windows CNG Key Isolation Service Elevation of Privilege Vulnerability", "descriptions": [ { "lang": "en-US", "value": "Windows CNG Key Isolation Service Elevation of Privilege Vulnerability", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain specific limited SYSTEM privileges.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28229", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "sourcePath": "/containers/cna/affected/0", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.4252", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "sourcePath": "/containers/cna/affected/1", "platforms": [ "ARM64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "10.0.0", "lessThan": "10.0.17763.4252", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019", "sourcePath": "/containers/cna/affected/2", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.4252", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019 (Server Core installation)", "sourcePath": "/containers/cna/affected/3", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.4252", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022", "sourcePath": "/containers/cna/affected/4", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/4/versions/0", "version": "10.0.20348.0", "lessThan": "10.0.20348.1668", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 20H2", "sourcePath": "/containers/cna/affected/5", "platforms": [ "32-bit Systems", "ARM64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/5/versions/0", "version": "10.0.0", "lessThan": "10.0.19042.2846", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 21H2", "sourcePath": "/containers/cna/affected/6", "platforms": [ "x64-based Systems", "ARM64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/6/versions/0", "version": "10.0.0", "lessThan": "10.0.22000.1817", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "sourcePath": "/containers/cna/affected/7", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/7/versions/0", "version": "10.0.19043.0", "lessThan": "10.0.19044.2846", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H2", "sourcePath": "/containers/cna/affected/8", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/8/versions/0", "version": "10.0.22621.0", "lessThan": "10.0.22621.1555", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 22H2", "sourcePath": "/containers/cna/affected/9", "platforms": [ "x64-based Systems", "ARM64-based Systems", "32-bit Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/9/versions/0", "version": "10.0.19045.0", "lessThan": "10.0.19045.2846", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1507", "sourcePath": "/containers/cna/affected/10", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/10/versions/0", "version": "10.0.10240.0", "lessThan": "10.0.10240.19869", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1607", "sourcePath": "/containers/cna/affected/11", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/11/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.5850", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016", "sourcePath": "/containers/cna/affected/12", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/12/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.5850", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016 (Server Core installation)", "sourcePath": "/containers/cna/affected/13", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/13/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.5850", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2", "sourcePath": "/containers/cna/affected/14", "platforms": [ "32-bit Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/14/versions/0", "version": "6.0.6003.0", "lessThan": "6.0.6003.22015", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2 (Server Core installation)", "sourcePath": "/containers/cna/affected/15", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/15/versions/0", "version": "6.0.6003.0", "lessThan": "6.0.6003.22015", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2", "sourcePath": "/containers/cna/affected/16", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/16/versions/0", "version": "6.0.6003.0", "lessThan": "6.0.6003.22015", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 R2 Service Pack 1", "sourcePath": "/containers/cna/affected/17", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/17/versions/0", "version": "6.1.7601.0", "lessThan": "6.1.7601.26466", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)", "sourcePath": "/containers/cna/affected/18", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/18/versions/0", "version": "6.1.7601.0", "lessThan": "6.1.7601.26466", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012", "sourcePath": "/containers/cna/affected/19", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/19/versions/0", "version": "6.2.9200.0", "lessThan": "6.2.9200.24216", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 (Server Core installation)", "sourcePath": "/containers/cna/affected/20", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/20/versions/0", "version": "6.2.9200.0", "lessThan": "6.2.9200.24216", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2", "sourcePath": "/containers/cna/affected/21", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/21/versions/0", "version": "6.3.9600.0", "lessThan": "6.3.9600.20919", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2 (Server Core installation)", "sourcePath": "/containers/cna/affected/22", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/22/versions/0", "version": "6.3.9600.0", "lessThan": "6.3.9600.20919", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-591", "lang": "en-US", "description": "CWE-591: Sensitive Data Storage in Improperly Locked Memory", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "baseScore": 7, "baseSeverity": "HIGH", "provider": "microsoft", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28229", "label": "Windows CNG Key Isolation Service Elevation of Privilege Vulnerability", "tags": [ "vendor-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-28229", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.4252\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.17763.4252\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.4252\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.4252\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourcePath": "/containers/cna/affected/4", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.1668\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourcePath": "/containers/cna/affected/5", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 20H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.19042.2846\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourcePath": "/containers/cna/affected/6", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 21H2\",\"platforms\":[\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.22000.1817\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourcePath": "/containers/cna/affected/7", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19043.0\",\"lessThan\":\"10.0.19044.2846\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourcePath": "/containers/cna/affected/8", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22621.0\",\"lessThan\":\"10.0.22621.1555\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourcePath": "/containers/cna/affected/9", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 22H2\",\"platforms\":[\"x64-based Systems\",\"ARM64-based Systems\",\"32-bit Systems\"],\"versions\":[{\"version\":\"10.0.19045.0\",\"lessThan\":\"10.0.19045.2846\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourcePath": "/containers/cna/affected/10", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1507\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.10240.0\",\"lessThan\":\"10.0.10240.19869\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourcePath": "/containers/cna/affected/11", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.5850\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourcePath": "/containers/cna/affected/12", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.5850\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourcePath": "/containers/cna/affected/13", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.5850\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourcePath": "/containers/cna/affected/14", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2\",\"platforms\":[\"32-bit Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"6.0.6003.22015\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/15", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourcePath": "/containers/cna/affected/15", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2 (Server Core installation)\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"6.0.6003.22015\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/16", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourcePath": "/containers/cna/affected/16", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"6.0.6003.22015\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/17", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourcePath": "/containers/cna/affected/17", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.7601.0\",\"lessThan\":\"6.1.7601.26466\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/18", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourcePath": "/containers/cna/affected/18", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.7601.0\",\"lessThan\":\"6.1.7601.26466\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/19", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourcePath": "/containers/cna/affected/19", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"6.2.9200.24216\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/20", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourcePath": "/containers/cna/affected/20", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"6.2.9200.24216\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/21", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourcePath": "/containers/cna/affected/21", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.20919\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/22", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourcePath": "/containers/cna/affected/22", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.20919\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Windows CNG Key Isolation Service Elevation of Privilege Vulnerability", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-591: Sensitive Data Storage in Improperly Locked Memory\",\"lang\":\"en-US\",\"type\":\"CWE\",\"cweId\":\"CWE-591\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":7,\"vectorString\":\"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-28229:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28229", "sourcePath": "retained:/originalText", "text": "Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain specific limited SYSTEM privileges.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-28229:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28229", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28229", "modifiedAt": "2023-10-04T00:00:00.000Z", "fetchedAt": "2026-10-25T05:17:50.551Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:49.303Z", "fetchedAt": "2026-10-25T05:32:58.665Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-10-04T00:00:00.000Z", "fetchedAt": "2026-10-25T05:17:50.551Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows Server 2022 / Windows 10 Version 20H2 / Windows 11 version 21H2 / Windows 10 Version 21H2 / Windows 11 version 22H2 / Windows 10 Version 22H2 / Wに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "本来与えられていない権限で、操作される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-25T05:32:58.665Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "d4bc4241437af322225d6b74181ba312811ee4b6ff7d4a24b5a04bc4a04d458c", "sourceModifiedAt": "2025-10-21T23:05:49.303Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Windows CNG キー分離サービスの特権昇格脆弱性", "risk": "攻撃者が限定的な SYSTEM 権限を取得できる可能性がある。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.17763.0以上、10.0.17763.4252未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.0以上、10.0.17763.4252未満。対象の環境：ARM64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.17763.0以上、10.0.17763.4252未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.17763.0以上、10.0.17763.4252未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json" ], "evidenceIds": [ "E6" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2022。影響ありとして記載：10.0.20348.0以上、10.0.20348.1668未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json" ], "evidenceIds": [ "E7" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 20H2。影響ありとして記載：10.0.0以上、10.0.19042.2846未満。対象の環境：32-bit Systems、ARM64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json" ], "evidenceIds": [ "E8" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 21H2。影響ありとして記載：10.0.0以上、10.0.22000.1817未満。対象の環境：x64-based Systems、ARM64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json" ], "evidenceIds": [ "E9" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 21H2。影響ありとして記載：10.0.19043.0以上、10.0.19044.2846未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json" ], "evidenceIds": [ "E10" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 22H2。影響ありとして記載：10.0.22621.0以上、10.0.22621.1555未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json" ], "evidenceIds": [ "E11" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 22H2。影響ありとして記載：10.0.19045.0以上、10.0.19045.2846未満。対象の環境：x64-based Systems、ARM64-based Systems、32-bit Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json" ], "evidenceIds": [ "E12" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1507。影響ありとして記載：10.0.10240.0以上、10.0.10240.19869未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json" ], "evidenceIds": [ "E13" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.14393.0以上、10.0.14393.5850未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json" ], "evidenceIds": [ "E14" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.14393.0以上、10.0.14393.5850未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json" ], "evidenceIds": [ "E15" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.14393.0以上、10.0.14393.5850未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json" ], "evidenceIds": [ "E16" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2008 Service Pack 2。影響ありとして記載：6.0.6003.0以上、6.0.6003.22015未満。対象の環境：32-bit Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json" ], "evidenceIds": [ "E17" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2008 Service Pack 2 (Server Core installation)。影響ありとして記載：6.0.6003.0以上、6.0.6003.22015未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json" ], "evidenceIds": [ "E18" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2008 Service Pack 2。影響ありとして記載：6.0.6003.0以上、6.0.6003.22015未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json" ], "evidenceIds": [ "E19" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1。影響ありとして記載：6.1.7601.0以上、6.1.7601.26466未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json" ], "evidenceIds": [ "E20" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1 (Server Core installation)。影響ありとして記載：6.1.7601.0以上、6.1.7601.26466未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json" ], "evidenceIds": [ "E21" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012。影響ありとして記載：6.2.9200.0以上、6.2.9200.24216未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json" ], "evidenceIds": [ "E22" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012 (Server Core installation)。影響ありとして記載：6.2.9200.0以上、6.2.9200.24216未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json" ], "evidenceIds": [ "E23" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012 R2。影響ありとして記載：6.3.9600.0以上、6.3.9600.20919未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json" ], "evidenceIds": [ "E24" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012 R2 (Server Core installation)。影響ありとして記載：6.3.9600.0以上、6.3.9600.20919未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json" ], "evidenceIds": [ "E25" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28229" ], "evidenceIds": [ "E27" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json" ], "evidenceIds": [ "E3" ] }, { "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止する。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28229" ], "evidenceIds": [ "E26" ] }, { "text": "「CVE-2023-28229」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-28229", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28229", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28229", "https://nvd.nist.gov/vuln/detail/CVE-2023-28229" ] }, { "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates" ] } ], "temporaryMitigations": [ { "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "https://www.cve.org/CVERecord?id=CVE-2023-28229", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28229", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28229", "https://nvd.nist.gov/vuln/detail/CVE-2023-28229" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json" ], "evidenceIds": [ "E3" ] }, { "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28229", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-28229", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28229", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28229", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device", "label": "Microsoft公式：Windowsの情報を調べる" }, { "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "label": "Microsoft公式：Windows Updateの操作" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourceField": "/containers/cna/title", "excerpt": "Windows CNG Key Isolation Service Elevation of Privilege Vulnerability", "language": null }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28229", "sourceField": "retained:/originalText", "excerpt": "Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain specific limited SYSTEM privileges.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.4252\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.17763.4252\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.4252\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.4252\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourceField": "/containers/cna/affected/4", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.1668\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourceField": "/containers/cna/affected/5", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 20H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.19042.2846\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourceField": "/containers/cna/affected/6", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 21H2\",\"platforms\":[\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.22000.1817\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourceField": "/containers/cna/affected/7", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19043.0\",\"lessThan\":\"10.0.19044.2846\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourceField": "/containers/cna/affected/8", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22621.0\",\"lessThan\":\"10.0.22621.1555\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourceField": "/containers/cna/affected/9", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 22H2\",\"platforms\":[\"x64-based Systems\",\"ARM64-based Systems\",\"32-bit Systems\"],\"versions\":[{\"version\":\"10.0.19045.0\",\"lessThan\":\"10.0.19045.2846\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourceField": "/containers/cna/affected/10", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1507\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.10240.0\",\"lessThan\":\"10.0.10240.19869\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourceField": "/containers/cna/affected/11", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.5850\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E15", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourceField": "/containers/cna/affected/12", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.5850\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E16", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourceField": "/containers/cna/affected/13", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.5850\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E17", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourceField": "/containers/cna/affected/14", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2\",\"platforms\":[\"32-bit Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"6.0.6003.22015\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E18", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourceField": "/containers/cna/affected/15", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2 (Server Core installation)\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"6.0.6003.22015\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E19", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourceField": "/containers/cna/affected/16", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"6.0.6003.22015\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E20", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourceField": "/containers/cna/affected/17", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.7601.0\",\"lessThan\":\"6.1.7601.26466\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E21", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourceField": "/containers/cna/affected/18", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.7601.0\",\"lessThan\":\"6.1.7601.26466\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E22", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourceField": "/containers/cna/affected/19", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"6.2.9200.24216\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E23", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourceField": "/containers/cna/affected/20", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"6.2.9200.24216\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E24", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourceField": "/containers/cna/affected/21", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.20919\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E25", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28229.json", "sourceField": "/containers/cna/affected/22", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.20919\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E26", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28229", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E27", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28229", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-28229\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-28229（Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows Server 2022 / Windows 10 Version 20H2 / Windows 11 version 21H2 / Windows 10 Version 21H2 / Windows 11 version 22H2 / Windows 10 Version 22H2 / W）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.17763.0以上、10.0.17763.4252未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.0以上、10.0.17763.4252未満。対象の環境：ARM64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.17763.0以上、10.0.17763.4252未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.17763.0以上、10.0.17763.4252未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2022。影響ありとして記載：10.0.20348.0以上、10.0.20348.1668未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 20H2。影響ありとして記載：10.0.0以上、10.0.19042.2846未満。対象の環境：32-bit Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 21H2。影響ありとして記載：10.0.0以上、10.0.22000.1817未満。対象の環境：x64-based Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 21H2。影響ありとして記載：10.0.19043.0以上、10.0.19044.2846未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 22H2。影響ありとして記載：10.0.22621.0以上、10.0.22621.1555未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 22H2。影響ありとして記載：10.0.19045.0以上、10.0.19045.2846未満。対象の環境：x64-based Systems、ARM64-based Systems、32-bit Systems\n・公式の対象表：Microsoft / Windows 10 Version 1507。影響ありとして記載：10.0.10240.0以上、10.0.10240.19869未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.14393.0以上、10.0.14393.5850未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.14393.0以上、10.0.14393.5850未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.14393.0以上、10.0.14393.5850未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 Service Pack 2。影響ありとして記載：6.0.6003.0以上、6.0.6003.22015未満。対象の環境：32-bit Systems\n・公式の対象表：Microsoft / Windows Server 2008 Service Pack 2 (Server Core installation)。影響ありとして記載：6.0.6003.0以上、6.0.6003.22015未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 Service Pack 2。影響ありとして記載：6.0.6003.0以上、6.0.6003.22015未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1。影響ありとして記載：6.1.7601.0以上、6.1.7601.26466未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1 (Server Core installation)。影響ありとして記載：6.1.7601.0以上、6.1.7601.26466未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012。影響ありとして記載：6.2.9200.0以上、6.2.9200.24216未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 (Server Core installation)。影響ありとして記載：6.2.9200.0以上、6.2.9200.24216未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 R2。影響ありとして記載：6.3.9600.0以上、6.3.9600.20919未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 R2 (Server Core installation)。影響ありとして記載：6.3.9600.0以上、6.3.9600.20919未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-28229", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-25T05:32:58.665Z", "lastSuccess": "2026-10-25T05:32:58.665Z", "sourceCheckedAt": "2026-10-25T05:32:58.665Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2023-42793", "aliases": [], "title": "TeamCity：コード実行", "summary": "JetBrains TeamCity の 2023.05.4 より前のバージョンでは、認証バイパスが可能で、これにより TeamCity サーバー上でリモートコード実行ができる可能性がありました。", "risk": "認証バイパスにより、攻撃者が TeamCity サーバー上で任意のコードを実行できる可能性があります。", "product": "TeamCity", "category": "other", "component": "package", "severity": "critical", "cvss": 9.8, "cvssVersion": "3.1", "cvssSource": "JetBrains", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "TeamCity", "range": "< 2023.05.4" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "「CVE-2023-42793」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42793.json", "label": "CVE：JetBrains" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42793", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-42793", "label": "CVE公式レコード" }, { "url": "https://www.jetbrains.com/privacy-security/issues-fixed/", "label": "CVE掲載の参考情報" }, { "url": "https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html", "label": "CVE掲載の参考情報" }, { "url": "https://attackerkb.com/topics/1XEEEkGHzt/cve-2023-42793", "label": "CVE掲載の参考情報" }, { "url": "https://www.securityweek.com/recently-patched-teamcity-vulnerability-exploited-to-hack-servers/", "label": "CVE掲載の参考情報" }, { "url": "https://www.rapid7.com/blog/post/2023/09/25/etr-cve-2023-42793-critical-authentication-bypass-in-jetbrains-teamcity-ci-cd-servers/", "label": "CVE掲載の参考情報" }, { "url": "https://www.sonarsource.com/blog/teamcity-vulnerability/", "label": "CVE掲載の参考情報" }, { "url": "https://blog.jetbrains.com/teamcity/2023/09/critical-security-issue-affecting-teamcity-on-premises-update-to-2023-05-4-now/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42793", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-09-19T16:57:29.245Z", "modifiedAt": "2025-10-21T23:05:37.592Z", "fetchedAt": "2026-10-25T05:33:04.191Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "JetBrains", "product": "TeamCity", "versions": [ { "version": "0", "status": "affected", "lessThan": "2023.05.4", "versionType": "semver" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-42793", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42793.json", "fetchedAt": "2026-10-25T05:33:04.191Z", "publishedAt": "2023-09-19T16:57:29.245Z", "modifiedAt": "2025-10-21T23:05:37.592Z", "state": "published", "provider": "JetBrains", "title": "", "descriptions": [ { "lang": "en", "value": "In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "JetBrains TeamCity contains an authentication bypass vulnerability that allows for remote code execution on TeamCity Server.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42793", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "JetBrains", "product": "TeamCity", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "2023.05.4", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-288", "lang": "en", "description": "CWE-288", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "JetBrains", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.jetbrains.com/privacy-security/issues-fixed/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://attackerkb.com/topics/1XEEEkGHzt/cve-2023-42793", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "https://www.securityweek.com/recently-patched-teamcity-vulnerability-exploited-to-hack-servers/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/4" }, { "url": "https://www.rapid7.com/blog/post/2023/09/25/etr-cve-2023-42793-critical-authentication-bypass-in-jetbrains-teamcity-ci-cd-servers/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/5" }, { "url": "https://www.sonarsource.com/blog/teamcity-vulnerability/", "label": "JetBrains", "tags": [], "provider": "JetBrains", "sourcePath": "/containers/cna/references/6" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-42793", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42793.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"JetBrains\",\"product\":\"TeamCity\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"2023.05.4\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42793.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42793.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"CWE-288\",\"cweId\":\"CWE-288\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42793.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-42793:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42793", "sourcePath": "retained:/originalText", "text": "JetBrains TeamCity contains an authentication bypass vulnerability that allows for remote code execution on TeamCity Server.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-42793:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42793", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42793", "modifiedAt": "2023-10-04T00:00:00.000Z", "fetchedAt": "2026-10-25T05:17:50.551Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:37.592Z", "fetchedAt": "2026-10-25T05:33:04.191Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-10-04T00:00:00.000Z", "fetchedAt": "2026-10-25T05:17:50.551Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "TeamCityにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-25T05:33:04.191Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "5a868cda9b277732faf3666e39eb4c61a937d7e12c86bf0b7704ef1aac01368a", "sourceModifiedAt": "2025-10-21T23:05:37.592Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "JetBrains TeamCity の 2023.05.4 より前のバージョンでは、認証バイパスが可能で、これにより TeamCity サーバー上でリモートコード実行ができる可能性がありました。", "risk": "認証バイパスにより、攻撃者が TeamCity サーバー上で任意のコードを実行できる可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "公式の対象表：JetBrains / TeamCity。影響ありとして記載：2023.05.4未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42793.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42793" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42793.json" ], "evidenceIds": [ "E3" ] }, { "text": "「TeamCity」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-42793", "https://www.jetbrains.com/privacy-security/issues-fixed/", "https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/", "http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html", "https://attackerkb.com/topics/1XEEEkGHzt/cve-2023-42793", "https://www.securityweek.com/recently-patched-teamcity-vulnerability-exploited-to-hack-servers/", "https://www.rapid7.com/blog/post/2023/09/25/etr-cve-2023-42793-critical-authentication-bypass-in-jetbrains-teamcity-ci-cd-servers/", "https://www.sonarsource.com/blog/teamcity-vulnerability/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42793", "https://blog.jetbrains.com/teamcity/2023/09/critical-security-issue-affecting-teamcity-on-premises-update-to-2023-05-4-now/", "https://nvd.nist.gov/vuln/detail/CVE-2023-42793" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42793" ], "evidenceIds": [ "E4" ] }, { "text": "「CVE-2023-42793」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-42793", "https://www.jetbrains.com/privacy-security/issues-fixed/", "https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/", "http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html", "https://attackerkb.com/topics/1XEEEkGHzt/cve-2023-42793", "https://www.securityweek.com/recently-patched-teamcity-vulnerability-exploited-to-hack-servers/", "https://www.rapid7.com/blog/post/2023/09/25/etr-cve-2023-42793-critical-authentication-bypass-in-jetbrains-teamcity-ci-cd-servers/", "https://www.sonarsource.com/blog/teamcity-vulnerability/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42793", "https://blog.jetbrains.com/teamcity/2023/09/critical-security-issue-affecting-teamcity-on-premises-update-to-2023-05-4-now/", "https://nvd.nist.gov/vuln/detail/CVE-2023-42793" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-42793", "https://www.jetbrains.com/privacy-security/issues-fixed/", "https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/", "http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html", "https://attackerkb.com/topics/1XEEEkGHzt/cve-2023-42793", "https://www.securityweek.com/recently-patched-teamcity-vulnerability-exploited-to-hack-servers/", "https://www.rapid7.com/blog/post/2023/09/25/etr-cve-2023-42793-critical-authentication-bypass-in-jetbrains-teamcity-ci-cd-servers/", "https://www.sonarsource.com/blog/teamcity-vulnerability/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42793", "https://blog.jetbrains.com/teamcity/2023/09/critical-security-issue-affecting-teamcity-on-premises-update-to-2023-05-4-now/", "https://nvd.nist.gov/vuln/detail/CVE-2023-42793" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-42793", "https://www.jetbrains.com/privacy-security/issues-fixed/", "https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/", "http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html", "https://attackerkb.com/topics/1XEEEkGHzt/cve-2023-42793", "https://www.securityweek.com/recently-patched-teamcity-vulnerability-exploited-to-hack-servers/", "https://www.rapid7.com/blog/post/2023/09/25/etr-cve-2023-42793-critical-authentication-bypass-in-jetbrains-teamcity-ci-cd-servers/", "https://www.sonarsource.com/blog/teamcity-vulnerability/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42793", "https://blog.jetbrains.com/teamcity/2023/09/critical-security-issue-affecting-teamcity-on-premises-update-to-2023-05-4-now/", "https://nvd.nist.gov/vuln/detail/CVE-2023-42793" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42793.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-42793", "https://www.jetbrains.com/privacy-security/issues-fixed/", "https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/", "http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html", "https://attackerkb.com/topics/1XEEEkGHzt/cve-2023-42793", "https://www.securityweek.com/recently-patched-teamcity-vulnerability-exploited-to-hack-servers/", "https://www.rapid7.com/blog/post/2023/09/25/etr-cve-2023-42793-critical-authentication-bypass-in-jetbrains-teamcity-ci-cd-servers/", "https://www.sonarsource.com/blog/teamcity-vulnerability/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42793", "https://blog.jetbrains.com/teamcity/2023/09/critical-security-issue-affecting-teamcity-on-premises-update-to-2023-05-4-now/", "https://nvd.nist.gov/vuln/detail/CVE-2023-42793" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42793.json", "label": "CVE：JetBrains" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42793", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-42793", "label": "CVE公式レコード" }, { "url": "https://www.jetbrains.com/privacy-security/issues-fixed/", "label": "CVE掲載の参考情報" }, { "url": "https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html", "label": "CVE掲載の参考情報" }, { "url": "https://attackerkb.com/topics/1XEEEkGHzt/cve-2023-42793", "label": "CVE掲載の参考情報" }, { "url": "https://www.securityweek.com/recently-patched-teamcity-vulnerability-exploited-to-hack-servers/", "label": "CVE掲載の参考情報" }, { "url": "https://www.rapid7.com/blog/post/2023/09/25/etr-cve-2023-42793-critical-authentication-bypass-in-jetbrains-teamcity-ci-cd-servers/", "label": "CVE掲載の参考情報" }, { "url": "https://www.sonarsource.com/blog/teamcity-vulnerability/", "label": "CVE掲載の参考情報" }, { "url": "https://blog.jetbrains.com/teamcity/2023/09/critical-security-issue-affecting-teamcity-on-premises-update-to-2023-05-4-now/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42793", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42793.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42793", "sourceField": "retained:/originalText", "excerpt": "JetBrains TeamCity contains an authentication bypass vulnerability that allows for remote code execution on TeamCity Server.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/42xxx/CVE-2023-42793.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"JetBrains\",\"product\":\"TeamCity\",\"versions\":[{\"version\":\"0\",\"status\":\"affected\",\"lessThan\":\"2023.05.4\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42793", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42793", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-42793\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-42793（TeamCity）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：JetBrains / TeamCity。影響ありとして記載：2023.05.4未満の版。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-42793", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-25T05:33:04.191Z", "lastSuccess": "2026-10-25T05:33:04.191Z", "sourceCheckedAt": "2026-10-25T05:33:04.191Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2023-4211", "aliases": [], "title": "Midgard GPU Kernel Driver / Bifrost GPU Kernel Driver / Valhall GPU Kernel Driver / Arm 5th Gen GPU Architecture Kernel Driver：脆弱性情報", "summary": "ローカルの非特権ユーザーが不適切なGPUメモリ処理操作を行い、既に解放されたメモリにアクセスできる。", "risk": "攻撃者は解放済みのGPUメモリを読み取ることができる。", "product": "Midgard GPU Kernel Driver / Bifrost GPU Kernel Driver / Valhall GPU Kernel Driver / Arm 5th Gen GPU Architecture Kernel Driver", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "Arm", "cvssVector": null, "affected": [ { "product": "Midgard GPU Kernel Driver", "range": ">= r12p0 / <= r32p0" }, { "product": "Bifrost GPU Kernel Driver", "range": ">= r0p0 / <= r42p0" }, { "product": "Valhall GPU Kernel Driver", "range": ">= r19p0 / <= r42p0" }, { "product": "Arm 5th Gen GPU Architecture Kernel Driver", "range": ">= r41p0 / <= r42p0" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止する。", "「CVE-2023-4211」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4211.json", "label": "CVE：Arm" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4211", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-4211", "label": "CVE公式レコード" }, { "url": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-4211", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-10-01T17:00:27.113Z", "modifiedAt": "2025-10-21T23:05:36.029Z", "fetchedAt": "2026-10-25T06:35:11.831Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.", "sourceTitle": "Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "product": "Midgard GPU Kernel Driver", "vendor": "Arm Ltd", "versions": [ { "lessThanOrEqual": "r32p0", "status": "affected", "version": "r12p0", "versionType": "patch" } ] }, { "defaultStatus": "unaffected", "product": "Bifrost GPU Kernel Driver", "vendor": "Arm Ltd", "versions": [ { "lessThanOrEqual": "r42p0", "status": "affected", "version": "r0p0", "versionType": "patch" } ] }, { "defaultStatus": "unaffected", "product": "Valhall GPU Kernel Driver", "vendor": "Arm Ltd", "versions": [ { "lessThanOrEqual": "r42p0", "status": "affected", "version": "r19p0", "versionType": "patch" } ] }, { "defaultStatus": "unaffected", "product": "Arm 5th Gen GPU Architecture Kernel Driver", "vendor": "Arm Ltd", "versions": [ { "lessThanOrEqual": "r42p0", "status": "affected", "version": "r41p0", "versionType": "patch" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-4211", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4211.json", "fetchedAt": "2026-10-25T06:35:11.831Z", "publishedAt": "2023-10-01T17:00:27.113Z", "modifiedAt": "2025-10-21T23:05:36.029Z", "state": "published", "provider": "Arm", "title": "Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations", "descriptions": [ { "lang": "en", "value": "A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4211", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Arm Ltd", "product": "Midgard GPU Kernel Driver", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "r12p0", "lessThanOrEqual": "r32p0", "versionType": "patch", "status": "affected" } ] }, { "vendor": "Arm Ltd", "product": "Bifrost GPU Kernel Driver", "sourcePath": "/containers/cna/affected/1", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "r0p0", "lessThanOrEqual": "r42p0", "versionType": "patch", "status": "affected" } ] }, { "vendor": "Arm Ltd", "product": "Valhall GPU Kernel Driver", "sourcePath": "/containers/cna/affected/2", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "r19p0", "lessThanOrEqual": "r42p0", "versionType": "patch", "status": "affected" } ] }, { "vendor": "Arm Ltd", "product": "Arm 5th Gen GPU Architecture Kernel Driver", "sourcePath": "/containers/cna/affected/3", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "r41p0", "lessThanOrEqual": "r42p0", "versionType": "patch", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-416", "lang": "en", "description": "CWE-416 Use after free", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "baseScore": 5.5, "baseSeverity": "MEDIUM", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4211", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4211.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"Midgard GPU Kernel Driver\",\"vendor\":\"Arm Ltd\",\"versions\":[{\"lessThanOrEqual\":\"r32p0\",\"status\":\"affected\",\"version\":\"r12p0\",\"versionType\":\"patch\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4211.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"Bifrost GPU Kernel Driver\",\"vendor\":\"Arm Ltd\",\"versions\":[{\"lessThanOrEqual\":\"r42p0\",\"status\":\"affected\",\"version\":\"r0p0\",\"versionType\":\"patch\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4211.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"Valhall GPU Kernel Driver\",\"vendor\":\"Arm Ltd\",\"versions\":[{\"lessThanOrEqual\":\"r42p0\",\"status\":\"affected\",\"version\":\"r19p0\",\"versionType\":\"patch\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4211.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"Arm 5th Gen GPU Architecture Kernel Driver\",\"vendor\":\"Arm Ltd\",\"versions\":[{\"lessThanOrEqual\":\"r42p0\",\"status\":\"affected\",\"version\":\"r41p0\",\"versionType\":\"patch\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4211.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4211.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-416\",\"description\":\"CWE-416 Use after free\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4211.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":5.5,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"MEDIUM\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\",\"integrityImpact\":\"NONE\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"NONE\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-4211:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4211", "sourcePath": "retained:/originalText", "text": "Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-4211:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4211", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4211", "modifiedAt": "2023-10-03T00:00:00.000Z", "fetchedAt": "2026-10-25T06:17:49.639Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:36.029Z", "fetchedAt": "2026-10-25T06:35:11.831Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-10-03T00:00:00.000Z", "fetchedAt": "2026-10-25T06:17:49.639Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Midgard GPU Kernel Driver / Bifrost GPU Kernel Driver / Valhall GPU Kernel Driver / Arm 5th Gen GPU Architecture Kernel Driverに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-25T06:35:11.831Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "b6bcccb883e4645c8ba2bb3468dc8a956c7f03ab9d2890376da988baca00deaa", "sourceModifiedAt": "2025-10-21T23:05:36.029Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "ローカルの非特権ユーザーが不適切なGPUメモリ処理操作を行い、既に解放されたメモリにアクセスできる。", "risk": "攻撃者は解放済みのGPUメモリを読み取ることができる。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "ローカルの非特権ユーザーが対象となる。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4211.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Arm Ltd / Midgard GPU Kernel Driver。影響ありとして記載：r12p0以上、r32p0以下。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4211.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Arm Ltd / Bifrost GPU Kernel Driver。影響ありとして記載：r0p0以上、r42p0以下。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4211.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Arm Ltd / Valhall GPU Kernel Driver。影響ありとして記載：r19p0以上、r42p0以下。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4211.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Arm Ltd / Arm 5th Gen GPU Architecture Kernel Driver。影響ありとして記載：r41p0以上、r42p0以下。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4211.json" ], "evidenceIds": [ "E6" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4211" ], "evidenceIds": [ "E8" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4211.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Midgard GPU Kernel Driver / Bifrost GPU Kernel Driver / Valhall GPU Kernel Driver / Arm 5th Gen GPU Architecture Kernel Driver」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-4211", "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4211", "https://nvd.nist.gov/vuln/detail/CVE-2023-4211" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止する。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4211" ], "evidenceIds": [ "E7" ] }, { "text": "「CVE-2023-4211」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-4211", "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4211", "https://nvd.nist.gov/vuln/detail/CVE-2023-4211" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-4211", "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4211", "https://nvd.nist.gov/vuln/detail/CVE-2023-4211" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-4211", "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4211", "https://nvd.nist.gov/vuln/detail/CVE-2023-4211" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4211.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-4211", "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4211", "https://nvd.nist.gov/vuln/detail/CVE-2023-4211" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4211.json", "label": "CVE：Arm" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4211", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-4211", "label": "CVE公式レコード" }, { "url": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-4211", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4211.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4211.json", "sourceField": "/containers/cna/title", "excerpt": "Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4211.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"Midgard GPU Kernel Driver\",\"vendor\":\"Arm Ltd\",\"versions\":[{\"lessThanOrEqual\":\"r32p0\",\"status\":\"affected\",\"version\":\"r12p0\",\"versionType\":\"patch\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4211.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"Bifrost GPU Kernel Driver\",\"vendor\":\"Arm Ltd\",\"versions\":[{\"lessThanOrEqual\":\"r42p0\",\"status\":\"affected\",\"version\":\"r0p0\",\"versionType\":\"patch\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4211.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"Valhall GPU Kernel Driver\",\"vendor\":\"Arm Ltd\",\"versions\":[{\"lessThanOrEqual\":\"r42p0\",\"status\":\"affected\",\"version\":\"r19p0\",\"versionType\":\"patch\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4211.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"Arm 5th Gen GPU Architecture Kernel Driver\",\"vendor\":\"Arm Ltd\",\"versions\":[{\"lessThanOrEqual\":\"r42p0\",\"status\":\"affected\",\"version\":\"r41p0\",\"versionType\":\"patch\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4211", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E8", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4211", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-4211\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-4211（Midgard GPU Kernel Driver / Bifrost GPU Kernel Driver / Valhall GPU Kernel Driver / Arm 5th Gen GPU Architecture Kernel Driver）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・ローカルの非特権ユーザーが対象となる。\n・公式の対象表：Arm Ltd / Midgard GPU Kernel Driver。影響ありとして記載：r12p0以上、r32p0以下。\n・公式の対象表：Arm Ltd / Bifrost GPU Kernel Driver。影響ありとして記載：r0p0以上、r42p0以下。\n・公式の対象表：Arm Ltd / Valhall GPU Kernel Driver。影響ありとして記載：r19p0以上、r42p0以下。\n・公式の対象表：Arm Ltd / Arm 5th Gen GPU Architecture Kernel Driver。影響ありとして記載：r41p0以上、r42p0以下。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-4211", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-25T06:35:11.831Z", "lastSuccess": "2026-10-25T06:35:11.831Z", "sourceCheckedAt": "2026-10-25T06:35:11.831Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2023-5217", "aliases": [], "title": "Chrome / libvpx：脆弱性情報", "summary": "Google Chrome（バージョン 117.0.5938.132 未満）および libvpx（バージョン 1.13.1 未満）における VP8 エンコード処理でヒープバッファオーバーフローが存在し、細工した HTML ページを介してリモートの攻撃者がヒープ破損を引き起こす可能性があります。", "risk": "ヒープ破損が発生する可能性があります。", "product": "Chrome / libvpx", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "Chrome", "cvssVector": null, "affected": [ { "product": "Chrome", "range": ">= 117.0.5938.132 / < 117.0.5938.132" }, { "product": "libvpx", "range": ">= 1.13.1 / < 1.13.1" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "「CVE-2023-5217」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/5xxx/CVE-2023-5217.json", "label": "CVE：Chrome" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-5217", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-5217", "label": "CVE公式レコード" }, { "url": "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html", "label": "CISAが示す関連情報" }, { "url": "https://crbug.com/1486441", "label": "CVE掲載の参考情報" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/28/5", "label": "CVE掲載の参考情報" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/28/6", "label": "CVE掲載の参考情報" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/29/1", "label": "CVE掲載の参考情報" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/29/2", "label": "CVE掲載の参考情報" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/29/7", "label": "CVE掲載の参考情報" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/29/9", "label": "CVE掲載の参考情報" }, { "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-44/", "label": "CVE掲載の参考情報" }, { "url": "https://security-tracker.debian.org/tracker/CVE-2023-5217", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5217", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-09-28T15:23:18.340Z", "modifiedAt": "2025-10-21T23:05:36.191Z", "fetchedAt": "2026-10-24T16:00:53.622Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Google", "product": "Chrome", "versions": [ { "version": "117.0.5938.132", "status": "affected", "lessThan": "117.0.5938.132", "versionType": "custom" } ] }, { "vendor": "Google", "product": "libvpx", "versions": [ { "version": "1.13.1", "status": "affected", "lessThan": "1.13.1", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-5217", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/5xxx/CVE-2023-5217.json", "fetchedAt": "2026-10-24T16:00:53.622Z", "publishedAt": "2023-09-28T15:23:18.340Z", "modifiedAt": "2025-10-21T23:05:36.191Z", "state": "published", "provider": "Chrome", "title": "", "descriptions": [ { "lang": "en", "value": "Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Google Chromium libvpx contains a heap buffer overflow vulnerability in vp8 encoding that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using libvpx, including but not limited to Google Chrome.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-5217", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Google", "product": "Chrome", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "117.0.5938.132", "lessThan": "117.0.5938.132", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Google", "product": "libvpx", "sourcePath": "/containers/cna/affected/1", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "1.13.1", "lessThan": "1.13.1", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "Heap buffer overflow", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://crbug.com/1486441", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/28/5", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/28/6", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/29/1", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/4" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/29/2", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/5" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/29/7", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/6" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/29/9", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/7" }, { "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-44/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/8" }, { "url": "https://security-tracker.debian.org/tracker/CVE-2023-5217", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/9" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2241191", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/10" }, { "url": "https://stackdiary.com/google-discloses-a-webm-vp8-bug-tracked-as-cve-2023-5217/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/11" }, { "url": "https://www.openwall.com/lists/oss-security/2023/09/28/5", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/12" }, { "url": "https://pastebin.com/TdkC4pDv", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/13" }, { "url": "https://github.com/webmproject/libvpx/commit/3fbd1dca6a4d2dad332a2110d646e4ffef36d590", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/14" }, { "url": "https://github.com/webmproject/libvpx/commit/af6dedd715f4307669366944cca6e0417b290282", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/15" }, { "url": "https://github.com/webmproject/libvpx/tags", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/16" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/29/11", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/17" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/29/12", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/18" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/29/14", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/19" }, { "url": "https://www.debian.org/security/2023/dsa-5510", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/20" }, { "url": "https://www.debian.org/security/2023/dsa-5509", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/21" }, { "url": "https://www.debian.org/security/2023/dsa-5508", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/22" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/30/1", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/23" }, { "url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00038.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/24" }, { "url": "https://twitter.com/maddiestone/status/1707163313711497266", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/25" }, { "url": "https://arstechnica.com/security/2023/09/new-0-day-in-chrome-and-firefox-is-likely-to-plague-other-software/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/26" }, { "url": "https://github.com/webmproject/libvpx/releases/tag/v1.13.1", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/27" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/30/3", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/28" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/30/2", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/29" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/30/4", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/30" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/30/5", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/31" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BCVSHVX2RFBU3RMCUFSATVQEJUFD4Q63/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/32" }, { "url": "http://www.openwall.com/lists/oss-security/2023/10/01/2", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/33" }, { "url": "http://www.openwall.com/lists/oss-security/2023/10/01/1", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/34" }, { "url": "http://www.openwall.com/lists/oss-security/2023/10/01/5", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/35" }, { "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00001.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/36" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTRUIS3564P7ZLM2S2IH4Y4KZ327LI4I/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/37" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/55YVCZNAVY3Y5E4DWPWMX2SPKZ2E5SOV/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/38" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4MFWDFJSSIFKWKNOCTQCFUNZWAXUCSS4/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/39" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CWEJYS5NC7KVFYU3OAMPKQDYN6JQGVK6/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/40" }, { "url": "http://www.openwall.com/lists/oss-security/2023/10/02/6", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/41" }, { "url": "http://www.openwall.com/lists/oss-security/2023/10/03/11", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/42" }, { "url": "https://security.gentoo.org/glsa/202310-04", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/43" }, { "url": "https://support.apple.com/kb/HT213961", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/44" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AY642Z6JZODQJE7Z62CFREVUHEGCXGPD/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/45" }, { "url": "http://seclists.org/fulldisclosure/2023/Oct/12", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/46" }, { "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00015.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/47" }, { "url": "https://support.apple.com/kb/HT213972", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/48" }, { "url": "http://seclists.org/fulldisclosure/2023/Oct/16", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/49" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TE7F54W5O5RS4ZMAAC7YK3CZWQXIDSKB/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/50" }, { "url": "https://security.gentoo.org/glsa/202401-34", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/51" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-5217", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/5xxx/CVE-2023-5217.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Google\",\"product\":\"Chrome\",\"versions\":[{\"version\":\"117.0.5938.132\",\"status\":\"affected\",\"lessThan\":\"117.0.5938.132\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/5xxx/CVE-2023-5217.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Google\",\"product\":\"libvpx\",\"versions\":[{\"version\":\"1.13.1\",\"status\":\"affected\",\"lessThan\":\"1.13.1\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/5xxx/CVE-2023-5217.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/5xxx/CVE-2023-5217.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Heap buffer overflow\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/5xxx/CVE-2023-5217.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-5217:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-5217", "sourcePath": "retained:/originalText", "text": "Google Chromium libvpx contains a heap buffer overflow vulnerability in vp8 encoding that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using libvpx, including but not limited to Google Chrome.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-5217:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-5217", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-5217", "modifiedAt": "2023-10-02T00:00:00.000Z", "fetchedAt": "2026-10-24T15:17:49.569Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:36.191Z", "fetchedAt": "2026-10-24T16:00:53.622Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-10-02T00:00:00.000Z", "fetchedAt": "2026-10-24T15:17:49.569Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Chrome / libvpxに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T16:00:53.622Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "787b1b6d97ebd152598b82bcb7689a56853bc42513aba438bf1036bffa29a1fd", "sourceModifiedAt": "2025-10-21T23:05:36.191Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Google Chrome（バージョン 117.0.5938.132 未満）および libvpx（バージョン 1.13.1 未満）における VP8 エンコード処理でヒープバッファオーバーフローが存在し、細工した HTML ページを介してリモートの攻撃者がヒープ破損を引き起こす可能性があります。", "risk": "ヒープ破損が発生する可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "攻撃者はリモートから細工した HTML ページを利用者に表示させる必要があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/5xxx/CVE-2023-5217.json" ], "evidenceIds": [ "E1" ] }, { "text": "対象は VP8 エンコード機能を使用する Google Chrome（バージョン 117.0.5938.132 未満）です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/5xxx/CVE-2023-5217.json" ], "evidenceIds": [ "E2" ] }, { "text": "対象は libvpx（バージョン 1.13.1 未満）です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/5xxx/CVE-2023-5217.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Google / Chrome。影響ありとして記載：対象表の開始値と上限がどちらも117.0.5938.132で、上限条件は「未満」です。この表だけでは範囲を確定できないため、説明文の対象範囲も照合してください。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/5xxx/CVE-2023-5217.json" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：Google / libvpx。影響ありとして記載：対象表の開始値と上限がどちらも1.13.1で、上限条件は「未満」です。この表だけでは範囲を確定できないため、説明文の対象範囲も照合してください。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/5xxx/CVE-2023-5217.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-5217" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/5xxx/CVE-2023-5217.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Chrome / libvpx」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-5217", "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html", "https://crbug.com/1486441", "http://www.openwall.com/lists/oss-security/2023/09/28/5", "http://www.openwall.com/lists/oss-security/2023/09/28/6", "http://www.openwall.com/lists/oss-security/2023/09/29/1", "http://www.openwall.com/lists/oss-security/2023/09/29/2", "http://www.openwall.com/lists/oss-security/2023/09/29/7", "http://www.openwall.com/lists/oss-security/2023/09/29/9", "https://www.mozilla.org/en-US/security/advisories/mfsa2023-44/", "https://security-tracker.debian.org/tracker/CVE-2023-5217", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-5217", "https://nvd.nist.gov/vuln/detail/CVE-2023-5217" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-5217" ], "evidenceIds": [ "E4" ] }, { "text": "「CVE-2023-5217」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-5217", "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html", "https://crbug.com/1486441", "http://www.openwall.com/lists/oss-security/2023/09/28/5", "http://www.openwall.com/lists/oss-security/2023/09/28/6", "http://www.openwall.com/lists/oss-security/2023/09/29/1", "http://www.openwall.com/lists/oss-security/2023/09/29/2", "http://www.openwall.com/lists/oss-security/2023/09/29/7", "http://www.openwall.com/lists/oss-security/2023/09/29/9", "https://www.mozilla.org/en-US/security/advisories/mfsa2023-44/", "https://security-tracker.debian.org/tracker/CVE-2023-5217", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-5217", "https://nvd.nist.gov/vuln/detail/CVE-2023-5217" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-5217", "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html", "https://crbug.com/1486441", "http://www.openwall.com/lists/oss-security/2023/09/28/5", "http://www.openwall.com/lists/oss-security/2023/09/28/6", "http://www.openwall.com/lists/oss-security/2023/09/29/1", "http://www.openwall.com/lists/oss-security/2023/09/29/2", "http://www.openwall.com/lists/oss-security/2023/09/29/7", "http://www.openwall.com/lists/oss-security/2023/09/29/9", "https://www.mozilla.org/en-US/security/advisories/mfsa2023-44/", "https://security-tracker.debian.org/tracker/CVE-2023-5217", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-5217", "https://nvd.nist.gov/vuln/detail/CVE-2023-5217" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-5217", "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html", "https://crbug.com/1486441", "http://www.openwall.com/lists/oss-security/2023/09/28/5", "http://www.openwall.com/lists/oss-security/2023/09/28/6", "http://www.openwall.com/lists/oss-security/2023/09/29/1", "http://www.openwall.com/lists/oss-security/2023/09/29/2", "http://www.openwall.com/lists/oss-security/2023/09/29/7", "http://www.openwall.com/lists/oss-security/2023/09/29/9", "https://www.mozilla.org/en-US/security/advisories/mfsa2023-44/", "https://security-tracker.debian.org/tracker/CVE-2023-5217", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-5217", "https://nvd.nist.gov/vuln/detail/CVE-2023-5217" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/5xxx/CVE-2023-5217.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-5217", "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html", "https://crbug.com/1486441", "http://www.openwall.com/lists/oss-security/2023/09/28/5", "http://www.openwall.com/lists/oss-security/2023/09/28/6", "http://www.openwall.com/lists/oss-security/2023/09/29/1", "http://www.openwall.com/lists/oss-security/2023/09/29/2", "http://www.openwall.com/lists/oss-security/2023/09/29/7", "http://www.openwall.com/lists/oss-security/2023/09/29/9", "https://www.mozilla.org/en-US/security/advisories/mfsa2023-44/", "https://security-tracker.debian.org/tracker/CVE-2023-5217", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-5217", "https://nvd.nist.gov/vuln/detail/CVE-2023-5217" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/5xxx/CVE-2023-5217.json", "label": "CVE：Chrome" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-5217", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-5217", "label": "CVE公式レコード" }, { "url": "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html", "label": "CISAが示す関連情報" }, { "url": "https://crbug.com/1486441", "label": "CVE掲載の参考情報" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/28/5", "label": "CVE掲載の参考情報" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/28/6", "label": "CVE掲載の参考情報" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/29/1", "label": "CVE掲載の参考情報" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/29/2", "label": "CVE掲載の参考情報" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/29/7", "label": "CVE掲載の参考情報" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/29/9", "label": "CVE掲載の参考情報" }, { "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-44/", "label": "CVE掲載の参考情報" }, { "url": "https://security-tracker.debian.org/tracker/CVE-2023-5217", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5217", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/5xxx/CVE-2023-5217.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/5xxx/CVE-2023-5217.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Google\",\"product\":\"Chrome\",\"versions\":[{\"version\":\"117.0.5938.132\",\"status\":\"affected\",\"lessThan\":\"117.0.5938.132\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/5xxx/CVE-2023-5217.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Google\",\"product\":\"libvpx\",\"versions\":[{\"version\":\"1.13.1\",\"status\":\"affected\",\"lessThan\":\"1.13.1\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-5217", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-5217", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-5217\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-5217（Chrome / libvpx）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者はリモートから細工した HTML ページを利用者に表示させる必要があります。\n・対象は VP8 エンコード機能を使用する Google Chrome（バージョン 117.0.5938.132 未満）です。\n・対象は libvpx（バージョン 1.13.1 未満）です。\n・公式の対象表：Google / Chrome。影響ありとして記載：対象表の開始値と上限がどちらも117.0.5938.132で、上限条件は「未満」です。この表だけでは範囲を確定できないため、説明文の対象範囲も照合してください。\n・公式の対象表：Google / libvpx。影響ありとして記載：対象表の開始値と上限がどちらも1.13.1で、上限条件は「未満」です。この表だけでは範囲を確定できないため、説明文の対象範囲も照合してください。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-5217", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T16:00:53.622Z", "lastSuccess": "2026-10-24T16:00:53.622Z", "sourceCheckedAt": "2026-10-24T16:00:53.622Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2018-14667", "aliases": [], "title": "RichFaces：コード実行", "summary": "RichFaces Framework 3.X から 3.3.4 までのバージョンは、UserResource リソースを通じた Expression Language (EL) インジェクションの脆弱性があり、リモートの認証されていない攻撃者が org.ajax4jsf.resource.UserResource$UriData を介した Java シリアライズオブジェクトのチェーンを利用して任意のコードを実行できる可能性があります。", "risk": "攻撃者はサーバー上で任意のコードを実行できるようになります。", "product": "RichFaces", "category": "linux", "component": "package", "severity": "critical", "cvss": 9.8, "cvssVersion": "3.0", "cvssSource": "redhat", "cvssVector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "RichFaces", "range": "affected 3.X through 3.3.4" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/14xxx/CVE-2018-14667.json", "label": "CVE：redhat" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-14667", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2018-14667", "label": "CVE公式レコード" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14667", "label": "CISAが示す関連情報" }, { "url": "https://access.redhat.com/errata/RHSA-2018:3519", "label": "RHSA-2018:3519" }, { "url": "https://access.redhat.com/errata/RHSA-2018:3581", "label": "RHSA-2018:3581" }, { "url": "https://access.redhat.com/errata/RHSA-2018:3518", "label": "RHSA-2018:3518" }, { "url": "https://access.redhat.com/errata/RHSA-2018:3517", "label": "RHSA-2018:3517" }, { "url": "http://www.securitytracker.com/id/1042037", "label": "1042037" }, { "url": "http://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html", "label": "CVE掲載の参考情報" }, { "url": "http://seclists.org/fulldisclosure/2020/Mar/21", "label": "20200313 RichFaces exploitation toolkit" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-14667", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://documentation.ubuntu.com/security/security-updates/", "label": "Ubuntu公式：セキュリティ更新と修正の確認" }, { "url": "https://access.redhat.com/solutions/57665", "label": "Red Hat公式：古い版への修正の取り込み" } ], "publishedAt": "2018-11-06T22:00:00.000Z", "modifiedAt": "2025-10-21T23:45:47.440Z", "fetchedAt": "2026-10-24T08:05:09.603Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserResource$UriData.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "RichFaces", "vendor": "[UNKNOWN]", "versions": [ { "status": "affected", "version": "affected 3.X through 3.3.4" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2018-14667", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/14xxx/CVE-2018-14667.json", "fetchedAt": "2026-10-24T08:05:09.603Z", "publishedAt": "2018-11-06T22:00:00.000Z", "modifiedAt": "2025-10-21T23:45:47.440Z", "state": "published", "provider": "redhat", "title": "", "descriptions": [ { "lang": "en", "value": "The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserResource$UriData.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Red Hat JBoss RichFaces Framework contains an expression language injection vulnerability via the UserResource resource. A remote, unauthenticated attacker could exploit this vulnerability to execute malicious code using a chain of Java serialized objects via org.ajax4jsf.resource.UserResource$UriData.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-14667", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "[UNKNOWN]", "product": "RichFaces", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "affected 3.X through 3.3.4", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-94", "lang": "en", "description": "CWE-94", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "redhat", "sourcePath": "/containers/cna/metrics/0/cvssV3_0" } ], "references": [ { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14667", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://access.redhat.com/errata/RHSA-2018:3519", "label": "RHSA-2018:3519", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://access.redhat.com/errata/RHSA-2018:3581", "label": "RHSA-2018:3581", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://access.redhat.com/errata/RHSA-2018:3518", "label": "RHSA-2018:3518", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "https://access.redhat.com/errata/RHSA-2018:3517", "label": "RHSA-2018:3517", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/4" }, { "url": "http://www.securitytracker.com/id/1042037", "label": "1042037", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/5" }, { "url": "http://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/6" }, { "url": "http://seclists.org/fulldisclosure/2020/Mar/21", "label": "20200313 RichFaces exploitation toolkit", "tags": [ "mailing-list", "x_refsource_FULLDISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/7" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-14667", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/14xxx/CVE-2018-14667.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"RichFaces\",\"vendor\":\"[UNKNOWN]\",\"versions\":[{\"status\":\"affected\",\"version\":\"affected 3.X through 3.3.4\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/14xxx/CVE-2018-14667.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserResource$UriData.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/14xxx/CVE-2018-14667.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-94\",\"description\":\"CWE-94\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/14xxx/CVE-2018-14667.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_0", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.0\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2018-14667:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-14667", "sourcePath": "retained:/originalText", "text": "Red Hat JBoss RichFaces Framework contains an expression language injection vulnerability via the UserResource resource. A remote, unauthenticated attacker could exploit this vulnerability to execute malicious code using a chain of Java serialized objects via org.ajax4jsf.resource.UserResource$UriData.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2018-14667:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-14667", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-14667", "modifiedAt": "2023-09-28T00:00:00.000Z", "fetchedAt": "2026-10-24T07:17:50.339Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:45:47.440Z", "fetchedAt": "2026-10-24T08:05:09.603Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-09-28T00:00:00.000Z", "fetchedAt": "2026-10-24T07:17:50.339Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "RichFacesにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T08:05:09.603Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "3a988e8cc2c2f86ab1e3c66cdad63215e0318db8f1d0d93953d59bdf0c6c67e6", "sourceModifiedAt": "2025-10-21T23:45:47.440Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "RichFaces Framework 3.X から 3.3.4 までのバージョンは、UserResource リソースを通じた Expression Language (EL) インジェクションの脆弱性があり、リモートの認証されていない攻撃者が org.ajax4jsf.resource.UserResource$UriData を介した Java シリアライズオブジェクトのチェーンを利用して任意のコードを実行できる可能性があります。", "risk": "攻撃者はサーバー上で任意のコードを実行できるようになります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "リモートの認証されていない攻撃者が UserResource リソースにアクセスでき、org.ajax4jsf.resource.UserResource$UriData を介した Java シリアライズオブジェクトのチェーンを送信できる場合にこの脆弱性が利用可能です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/14xxx/CVE-2018-14667.json" ], "evidenceIds": [ "E1" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-14667" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/14xxx/CVE-2018-14667.json" ], "evidenceIds": [ "E2" ] }, { "text": "管理担当者に、Linuxの種類（Ubuntu、Red Hatなど）と版、対象パッケージ名、配布元を含む完全なパッケージ番号を確認してもらいます。OSの種類や製品の上流の番号だけで、影響の有無を決めないでください。", "kind": "procedure", "sourceUrls": [ "https://documentation.ubuntu.com/security/security-updates/", "https://access.redhat.com/solutions/57665" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/14xxx/CVE-2018-14667.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-14667" ], "evidenceIds": [ "E3" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/14xxx/CVE-2018-14667.json" ], "evidenceIds": [ "E2" ] }, { "text": "修正後の完全なパッケージ番号と、その配布元のCVE対応表を照合します。古い番号のまま修正を取り込む場合があるため、数字が小さいという理由だけで未修正とは扱いません。管理者に必要な再起動の完了も確認してもらってください。", "kind": "procedure", "sourceUrls": [ "https://documentation.ubuntu.com/security/security-updates/", "https://access.redhat.com/solutions/57665" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/14xxx/CVE-2018-14667.json", "label": "CVE：redhat" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-14667", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2018-14667", "label": "CVE公式レコード" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14667", "label": "CISAが示す関連情報" }, { "url": "https://access.redhat.com/errata/RHSA-2018:3519", "label": "RHSA-2018:3519" }, { "url": "https://access.redhat.com/errata/RHSA-2018:3581", "label": "RHSA-2018:3581" }, { "url": "https://access.redhat.com/errata/RHSA-2018:3518", "label": "RHSA-2018:3518" }, { "url": "https://access.redhat.com/errata/RHSA-2018:3517", "label": "RHSA-2018:3517" }, { "url": "http://www.securitytracker.com/id/1042037", "label": "1042037" }, { "url": "http://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html", "label": "CVE掲載の参考情報" }, { "url": "http://seclists.org/fulldisclosure/2020/Mar/21", "label": "20200313 RichFaces exploitation toolkit" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-14667", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://documentation.ubuntu.com/security/security-updates/", "label": "Ubuntu公式：セキュリティ更新と修正の確認" }, { "url": "https://access.redhat.com/solutions/57665", "label": "Red Hat公式：古い版への修正の取り込み" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/14xxx/CVE-2018-14667.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserResource$UriData.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/14xxx/CVE-2018-14667.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"RichFaces\",\"vendor\":\"[UNKNOWN]\",\"versions\":[{\"status\":\"affected\",\"version\":\"affected 3.X through 3.3.4\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-14667", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-14667", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2018-14667\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2018-14667（RichFaces）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・リモートの認証されていない攻撃者が UserResource リソースにアクセスでき、org.ajax4jsf.resource.UserResource$UriData を介した Java シリアライズオブジェクトのチェーンを送信できる場合にこの脆弱性が利用可能です。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2018-14667", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T08:05:09.603Z", "lastSuccess": "2026-10-24T08:05:09.603Z", "sourceCheckedAt": "2026-10-24T08:05:09.603Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2023-41991", "aliases": [], "title": "iOS and iPadOS / macOS：脆弱性情報", "summary": "証明書の検証に問題があり、macOS Ventura 13.6、iOS 16.7、iPadOS 16.7 で修正されました。悪意のあるアプリが署名検証を回避できる可能性があります。Apple は iOS 16.7 以前のバージョンでこの問題が実際に悪用されたとの報告を認識しています。", "risk": "悪意のあるアプリが署名検証を回避できるため、正規のアプリとして偽装した不正なコードが実行される恐れがあります。", "product": "iOS and iPadOS / macOS", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "apple", "cvssVector": null, "affected": [ { "product": "iOS and iPadOS", "range": ">= unspecified / < 16.7" }, { "product": "macOS", "range": ">= unspecified / < 13.6" } ], "fixed": [], "steps": [ "証明書の検証に問題があり、macOS Ventura 13.6、iOS 16.7、iPadOS 16.7 で修正されました。", "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "「CVE-2023-41991」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41991.json", "label": "CVE：apple" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41991", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-41991", "label": "CVE公式レコード" }, { "url": "https://support.apple.com/en-us/HT213927", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT213931", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT213926", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT213928", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT213929", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-09-21T18:23:48.974Z", "modifiedAt": "2025-11-04T19:21:39.550Z", "fetchedAt": "2026-10-24T08:05:11.841Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Apple", "product": "iOS and iPadOS", "versions": [ { "version": "unspecified", "status": "affected", "lessThan": "16.7", "versionType": "custom" } ] }, { "vendor": "Apple", "product": "macOS", "versions": [ { "version": "unspecified", "status": "affected", "lessThan": "13.6", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-41991", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41991.json", "fetchedAt": "2026-10-24T08:05:11.841Z", "publishedAt": "2023-09-21T18:23:48.974Z", "modifiedAt": "2025-11-04T19:21:39.550Z", "state": "published", "provider": "apple", "title": "", "descriptions": [ { "lang": "en", "value": "A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Apple iOS, iPadOS, macOS, and watchOS contain an improper certificate validation vulnerability that can allow a malicious app to bypass signature validation.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41991", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Apple", "product": "iOS and iPadOS", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "unspecified", "lessThan": "16.7", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Apple", "product": "macOS", "sourcePath": "/containers/cna/affected/1", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "unspecified", "lessThan": "13.6", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "baseScore": 5.5, "baseSeverity": "MEDIUM", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://support.apple.com/en-us/HT213927", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://support.apple.com/en-us/HT213931", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://support.apple.com/kb/HT213931", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://support.apple.com/kb/HT213927", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41991", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41991.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Apple\",\"product\":\"iOS and iPadOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"16.7\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41991.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Apple\",\"product\":\"macOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"13.6\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41991.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41991.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41991.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":5.5,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"MEDIUM\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"NONE\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"NONE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-41991:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41991", "sourcePath": "retained:/originalText", "text": "Apple iOS, iPadOS, macOS, and watchOS contain an improper certificate validation vulnerability that can allow a malicious app to bypass signature validation.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-41991:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41991", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41991", "modifiedAt": "2023-09-25T00:00:00.000Z", "fetchedAt": "2026-10-24T07:17:50.339Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-11-04T19:21:39.550Z", "fetchedAt": "2026-10-24T08:05:11.841Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-09-25T00:00:00.000Z", "fetchedAt": "2026-10-24T07:17:50.339Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "iOS and iPadOS / macOSに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T08:05:11.841Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "b4c6b4091a63a15de02fc7a4b17957a62fe8cb959d3051f978504056b9f07418", "sourceModifiedAt": "2025-11-04T19:21:39.550Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "証明書の検証に問題があり、macOS Ventura 13.6、iOS 16.7、iPadOS 16.7 で修正されました。悪意のあるアプリが署名検証を回避できる可能性があります。Apple は iOS 16.7 以前のバージョンでこの問題が実際に悪用されたとの報告を認識しています。", "risk": "悪意のあるアプリが署名検証を回避できるため、正規のアプリとして偽装した不正なコードが実行される恐れがあります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "iOS、iPadOS、macOS、watchOS が影響を受け、iOS と iPadOS はバージョン 16.7 未満、macOS はバージョン 13.6 未満、watchOS はバージョン情報が明示されていません。特別な設定や操作は不要で、任意のアプリがこの脆弱性を利用できる可能性があります。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41991", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41991.json" ], "evidenceIds": [ "E2", "E3", "E4" ] }, { "text": "公式の対象表：Apple / iOS and iPadOS。影響ありとして記載：16.7未満（原資料では開始版が未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41991.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Apple / macOS。影響ありとして記載：13.6未満（原資料では開始版が未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41991.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41991" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41991.json" ], "evidenceIds": [ "E3" ] }, { "text": "「iOS and iPadOS / macOS」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-41991", "https://support.apple.com/en-us/HT213927", "https://support.apple.com/en-us/HT213931", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41991", "https://support.apple.com/en-us/HT213926", "https://support.apple.com/en-us/HT213928", "https://support.apple.com/en-us/HT213929" ] } ], "actions": [ { "text": "証明書の検証に問題があり、macOS Ventura 13.6、iOS 16.7、iPadOS 16.7 で修正されました。", "kind": "fix", "evidenceIds": [ "E1" ], "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41991.json" ] }, { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41991" ], "evidenceIds": [ "E5" ] }, { "text": "「CVE-2023-41991」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-41991", "https://support.apple.com/en-us/HT213927", "https://support.apple.com/en-us/HT213931", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41991", "https://support.apple.com/en-us/HT213926", "https://support.apple.com/en-us/HT213928", "https://support.apple.com/en-us/HT213929" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-41991", "https://support.apple.com/en-us/HT213927", "https://support.apple.com/en-us/HT213931", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41991", "https://support.apple.com/en-us/HT213926", "https://support.apple.com/en-us/HT213928", "https://support.apple.com/en-us/HT213929" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-41991", "https://support.apple.com/en-us/HT213927", "https://support.apple.com/en-us/HT213931", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41991", "https://support.apple.com/en-us/HT213926", "https://support.apple.com/en-us/HT213928", "https://support.apple.com/en-us/HT213929" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41991.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-41991", "https://support.apple.com/en-us/HT213927", "https://support.apple.com/en-us/HT213931", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41991", "https://support.apple.com/en-us/HT213926", "https://support.apple.com/en-us/HT213928", "https://support.apple.com/en-us/HT213929" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41991.json", "label": "CVE：apple" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41991", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-41991", "label": "CVE公式レコード" }, { "url": "https://support.apple.com/en-us/HT213927", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT213931", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT213926", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT213928", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT213929", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41991.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41991", "sourceField": "retained:/originalText", "excerpt": "Apple iOS, iPadOS, macOS, and watchOS contain an improper certificate validation vulnerability that can allow a malicious app to bypass signature validation.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41991.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"iOS and iPadOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"16.7\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41991.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"macOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"13.6\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41991", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41991", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-41991\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-41991（iOS and iPadOS / macOS）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・iOS、iPadOS、macOS、watchOS が影響を受け、iOS と iPadOS はバージョン 16.7 未満、macOS はバージョン 13.6 未満、watchOS はバージョン情報が明示されていません。特別な設定や操作は不要で、任意のアプリがこの脆弱性を利用できる可能性があります。\n・公式の対象表：Apple / iOS and iPadOS。影響ありとして記載：16.7未満（原資料では開始版が未指定）。\n・公式の対象表：Apple / macOS。影響ありとして記載：13.6未満（原資料では開始版が未指定）。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-41991", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T08:05:11.841Z", "lastSuccess": "2026-10-24T08:05:11.841Z", "sourceCheckedAt": "2026-10-24T08:05:11.841Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2023-41992", "aliases": [], "title": "macOS / iOS and iPadOS：脆弱性情報", "summary": "ローカルの攻撃者が特権を昇格させる可能性があります。Apple は iOS 16.7 以前のバージョンに対してこの問題が実際に悪用されたとの報告を認識しています。", "risk": "特権が昇格すると、攻撃者はシステム上でより高い権限で操作できるようになります。", "product": "macOS / iOS and iPadOS", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "apple", "cvssVector": null, "affected": [ { "product": "macOS", "range": ">= unspecified / < 12.7" }, { "product": "iOS and iPadOS", "range": ">= unspecified / < 16.7" }, { "product": "macOS", "range": ">= unspecified / < 13.6" } ], "fixed": [], "steps": [ "ベンダーの指示に従った緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "「CVE-2023-41992」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41992.json", "label": "CVE：apple" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41992", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-41992", "label": "CVE公式レコード" }, { "url": "https://support.apple.com/en-us/HT213932", "label": "CVE掲載の参考情報" }, { "url": "https://support.apple.com/en-us/HT213927", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT213931", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT213926", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT213928", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT213929", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-09-21T18:23:49.779Z", "modifiedAt": "2025-11-04T19:21:41.728Z", "fetchedAt": "2026-10-25T05:55:52.458Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Apple", "product": "macOS", "versions": [ { "version": "unspecified", "status": "affected", "lessThan": "12.7", "versionType": "custom" } ] }, { "vendor": "Apple", "product": "iOS and iPadOS", "versions": [ { "version": "unspecified", "status": "affected", "lessThan": "16.7", "versionType": "custom" } ] }, { "vendor": "Apple", "product": "macOS", "versions": [ { "version": "unspecified", "status": "affected", "lessThan": "13.6", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-41992", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41992.json", "fetchedAt": "2026-10-25T05:55:52.458Z", "publishedAt": "2023-09-21T18:23:49.779Z", "modifiedAt": "2025-11-04T19:21:41.728Z", "state": "published", "provider": "apple", "title": "", "descriptions": [ { "lang": "en", "value": "The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Apple iOS, iPadOS, macOS, and watchOS contain an unspecified vulnerability that allows for local privilege escalation.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41992", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Apple", "product": "macOS", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "unspecified", "lessThan": "12.7", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Apple", "product": "iOS and iPadOS", "sourcePath": "/containers/cna/affected/1", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "unspecified", "lessThan": "16.7", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Apple", "product": "macOS", "sourcePath": "/containers/cna/affected/2", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "unspecified", "lessThan": "13.6", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://support.apple.com/en-us/HT213932", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://support.apple.com/en-us/HT213927", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://support.apple.com/en-us/HT213931", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://support.apple.com/kb/HT213932", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "https://support.apple.com/kb/HT213927", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/0/references/4" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41992", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41992.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Apple\",\"product\":\"macOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"12.7\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41992.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Apple\",\"product\":\"iOS and iPadOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"16.7\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41992.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Apple\",\"product\":\"macOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"13.6\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41992.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41992.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41992.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-41992:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41992", "sourcePath": "retained:/originalText", "text": "Apple iOS, iPadOS, macOS, and watchOS contain an unspecified vulnerability that allows for local privilege escalation.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-41992:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41992", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41992", "modifiedAt": "2023-09-25T00:00:00.000Z", "fetchedAt": "2026-10-25T05:17:50.551Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-11-04T19:21:41.728Z", "fetchedAt": "2026-10-25T05:55:52.458Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-09-25T00:00:00.000Z", "fetchedAt": "2026-10-25T05:17:50.551Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "macOS / iOS and iPadOSに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-25T05:55:52.458Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "f5fb30c3e53e0e4f1b964fbd85cc841935f29b851010cf7d167c17fbc17ea52f", "sourceModifiedAt": "2025-11-04T19:21:41.728Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "ローカルの攻撃者が特権を昇格させる可能性があります。Apple は iOS 16.7 以前のバージョンに対してこの問題が実際に悪用されたとの報告を認識しています。", "risk": "特権が昇格すると、攻撃者はシステム上でより高い権限で操作できるようになります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E3" ], "applicability": [ { "text": "ローカルの攻撃者が対象デバイス上で操作できることが前提です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41992.json" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：Apple / macOS。影響ありとして記載：12.7未満（原資料では開始版が未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41992.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Apple / iOS and iPadOS。影響ありとして記載：16.7未満（原資料では開始版が未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41992.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Apple / macOS。影響ありとして記載：13.6未満（原資料では開始版が未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41992.json" ], "evidenceIds": [ "E6" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41992" ], "evidenceIds": [ "E8" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41992.json" ], "evidenceIds": [ "E4" ] }, { "text": "「macOS / iOS and iPadOS」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-41992", "https://support.apple.com/en-us/HT213932", "https://support.apple.com/en-us/HT213927", "https://support.apple.com/en-us/HT213931", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41992", "https://support.apple.com/en-us/HT213926", "https://support.apple.com/en-us/HT213928", "https://support.apple.com/en-us/HT213929" ] } ], "actions": [ { "text": "ベンダーの指示に従った緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41992" ], "evidenceIds": [ "E7" ] }, { "text": "「CVE-2023-41992」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-41992", "https://support.apple.com/en-us/HT213932", "https://support.apple.com/en-us/HT213927", "https://support.apple.com/en-us/HT213931", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41992", "https://support.apple.com/en-us/HT213926", "https://support.apple.com/en-us/HT213928", "https://support.apple.com/en-us/HT213929" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-41992", "https://support.apple.com/en-us/HT213932", "https://support.apple.com/en-us/HT213927", "https://support.apple.com/en-us/HT213931", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41992", "https://support.apple.com/en-us/HT213926", "https://support.apple.com/en-us/HT213928", "https://support.apple.com/en-us/HT213929" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-41992", "https://support.apple.com/en-us/HT213932", "https://support.apple.com/en-us/HT213927", "https://support.apple.com/en-us/HT213931", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41992", "https://support.apple.com/en-us/HT213926", "https://support.apple.com/en-us/HT213928", "https://support.apple.com/en-us/HT213929" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41992.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-41992", "https://support.apple.com/en-us/HT213932", "https://support.apple.com/en-us/HT213927", "https://support.apple.com/en-us/HT213931", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41992", "https://support.apple.com/en-us/HT213926", "https://support.apple.com/en-us/HT213928", "https://support.apple.com/en-us/HT213929" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41992.json", "label": "CVE：apple" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41992", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-41992", "label": "CVE公式レコード" }, { "url": "https://support.apple.com/en-us/HT213932", "label": "CVE掲載の参考情報" }, { "url": "https://support.apple.com/en-us/HT213927", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT213931", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT213926", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT213928", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT213929", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41992.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41992.json", "sourceField": "/containers/cna/problemTypes/0/descriptions/0", "excerpt": "{\"lang\":\"en\",\"description\":\"A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.\"}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41992", "sourceField": "retained:/originalText", "excerpt": "Apple iOS, iPadOS, macOS, and watchOS contain an unspecified vulnerability that allows for local privilege escalation.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41992.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"macOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"12.7\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41992.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"iOS and iPadOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"16.7\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41992.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"macOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"13.6\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41992", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E8", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41992", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-41992\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-41992（macOS / iOS and iPadOS）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・ローカルの攻撃者が対象デバイス上で操作できることが前提です。\n・公式の対象表：Apple / macOS。影響ありとして記載：12.7未満（原資料では開始版が未指定）。\n・公式の対象表：Apple / iOS and iPadOS。影響ありとして記載：16.7未満（原資料では開始版が未指定）。\n・公式の対象表：Apple / macOS。影響ありとして記載：13.6未満（原資料では開始版が未指定）。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-41992", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-25T05:55:52.458Z", "lastSuccess": "2026-10-25T05:55:52.458Z", "sourceCheckedAt": "2026-10-25T05:55:52.458Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2023-41993", "aliases": [], "title": "macOS：コード実行", "summary": "Webコンテンツを処理する際に、細工されたウェブコンテンツが任意コード実行（サーバーや機器に攻撃者の命令を実行させられる）につながる可能性があります。この問題は macOS Sonoma 14 で修正されました。また、Apple は iOS 16.7 より前のバージョンに対してこの問題が実際に悪用されたとの報告を認識しています。", "risk": "任意コード実行により、攻撃者が対象システム上でコードを実行できる可能性があります。", "product": "macOS", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "apple", "cvssVector": null, "affected": [ { "product": "macOS", "range": ">= unspecified / < 14" } ], "fixed": [], "steps": [ "macOS Sonoma 14 にアップデートして問題を修正します。", "「CVE-2023-41993」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41993.json", "label": "CVE：apple" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41993", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-41993", "label": "CVE公式レコード" }, { "url": "https://support.apple.com/en-us/HT213940", "label": "CVE掲載の参考情報" }, { "url": "https://security.gentoo.org/glsa/202401-33", "label": "CVE掲載の参考情報" }, { "url": "https://security.netapp.com/advisory/ntap-20240426-0004/", "label": "CVE掲載の参考情報" }, { "url": "https://support.apple.com/en-us/HT213926", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT213927", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT213930", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-41993", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-09-21T18:23:52.197Z", "modifiedAt": "2025-11-04T19:21:43.904Z", "fetchedAt": "2026-10-24T08:05:18.260Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Apple", "product": "macOS", "versions": [ { "version": "unspecified", "status": "affected", "lessThan": "14", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-41993", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41993.json", "fetchedAt": "2026-10-24T08:05:18.260Z", "publishedAt": "2023-09-21T18:23:52.197Z", "modifiedAt": "2025-11-04T19:21:43.904Z", "state": "published", "provider": "apple", "title": "", "descriptions": [ { "lang": "en", "value": "The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41993", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Apple", "product": "macOS", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "unspecified", "lessThan": "14", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://support.apple.com/en-us/HT213940", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://security.gentoo.org/glsa/202401-33", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://security.netapp.com/advisory/ntap-20240426-0004/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41993", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://webkitgtk.org/security/WSA-2023-0009.html", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/3" }, { "url": "https://support.apple.com/kb/HT213930", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/4" }, { "url": "https://support.apple.com/kb/HT213926", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/5" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41993.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Apple\",\"product\":\"macOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"14\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41993.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41993.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41993.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-41993:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41993", "sourcePath": "retained:/originalText", "text": "Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-41993:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41993", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41993", "modifiedAt": "2023-09-25T00:00:00.000Z", "fetchedAt": "2026-10-24T07:17:50.339Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-11-04T19:21:43.904Z", "fetchedAt": "2026-10-24T08:05:18.260Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-09-25T00:00:00.000Z", "fetchedAt": "2026-10-24T07:17:50.339Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "macOSにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T08:05:18.260Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "f12bef822b35c555716a53416cebfe3b0a806590f788b6509029774eda383129", "sourceModifiedAt": "2025-11-04T19:21:43.904Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Webコンテンツを処理する際に、細工されたウェブコンテンツが任意コード実行（サーバーや機器に攻撃者の命令を実行させられる）につながる可能性があります。この問題は macOS Sonoma 14 で修正されました。また、Apple は iOS 16.7 より前のバージョンに対してこの問題が実際に悪用されたとの報告を認識しています。", "risk": "任意コード実行により、攻撃者が対象システム上でコードを実行できる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E2", "E3" ], "applicability": [ { "text": "WebKit を使用して HTML を処理する際に、攻撃者が細工したウェブコンテンツを表示・処理する環境が対象です。Safari や WebKit を利用する他社製品も含まれます。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41993" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Apple / macOS。影響ありとして記載：14未満（原資料では開始版が未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41993.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41993" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41993.json" ], "evidenceIds": [ "E4" ] }, { "text": "「macOS」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-41993", "https://support.apple.com/en-us/HT213940", "https://security.gentoo.org/glsa/202401-33", "https://security.netapp.com/advisory/ntap-20240426-0004/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41993", "https://support.apple.com/en-us/HT213926", "https://support.apple.com/en-us/HT213927", "https://support.apple.com/en-us/HT213930", "https://nvd.nist.gov/vuln/detail/CVE-2023-41993" ] } ], "actions": [ { "text": "macOS Sonoma 14 にアップデートして問題を修正します。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41993.json" ], "evidenceIds": [ "E1" ] }, { "text": "「CVE-2023-41993」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-41993", "https://support.apple.com/en-us/HT213940", "https://security.gentoo.org/glsa/202401-33", "https://security.netapp.com/advisory/ntap-20240426-0004/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41993", "https://support.apple.com/en-us/HT213926", "https://support.apple.com/en-us/HT213927", "https://support.apple.com/en-us/HT213930", "https://nvd.nist.gov/vuln/detail/CVE-2023-41993" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-41993", "https://support.apple.com/en-us/HT213940", "https://security.gentoo.org/glsa/202401-33", "https://security.netapp.com/advisory/ntap-20240426-0004/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41993", "https://support.apple.com/en-us/HT213926", "https://support.apple.com/en-us/HT213927", "https://support.apple.com/en-us/HT213930", "https://nvd.nist.gov/vuln/detail/CVE-2023-41993" ] } ], "temporaryMitigations": [ { "text": "ベンダーの指示に従った緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41993" ], "evidenceIds": [ "E5" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41993.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-41993", "https://support.apple.com/en-us/HT213940", "https://security.gentoo.org/glsa/202401-33", "https://security.netapp.com/advisory/ntap-20240426-0004/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41993", "https://support.apple.com/en-us/HT213926", "https://support.apple.com/en-us/HT213927", "https://support.apple.com/en-us/HT213930", "https://nvd.nist.gov/vuln/detail/CVE-2023-41993" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41993.json", "label": "CVE：apple" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41993", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-41993", "label": "CVE公式レコード" }, { "url": "https://support.apple.com/en-us/HT213940", "label": "CVE掲載の参考情報" }, { "url": "https://security.gentoo.org/glsa/202401-33", "label": "CVE掲載の参考情報" }, { "url": "https://security.netapp.com/advisory/ntap-20240426-0004/", "label": "CVE掲載の参考情報" }, { "url": "https://support.apple.com/en-us/HT213926", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT213927", "label": "CISAが示す関連情報" }, { "url": "https://support.apple.com/en-us/HT213930", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-41993", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41993.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41993.json", "sourceField": "/containers/cna/problemTypes/0/descriptions/0", "excerpt": "{\"lang\":\"en\",\"description\":\"Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.\"}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41993", "sourceField": "retained:/originalText", "excerpt": "Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41993.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Apple\",\"product\":\"macOS\",\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"14\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41993", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41993", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-41993\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-41993（macOS）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・WebKit を使用して HTML を処理する際に、攻撃者が細工したウェブコンテンツを表示・処理する環境が対象です。Safari や WebKit を利用する他社製品も含まれます。\n・公式の対象表：Apple / macOS。影響ありとして記載：14未満（原資料では開始版が未指定）。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-41993", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T08:05:18.260Z", "lastSuccess": "2026-10-24T08:05:18.260Z", "sourceCheckedAt": "2026-10-24T08:05:18.260Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2023-41179", "aliases": [], "title": "Trend Micro Apex One / Trend Micro Worry-Free Business Security / Trend Micro Worry-Free Business Security Services：コード実行", "summary": "攻撃者が管理コンソールへのアクセス権を取得すると、Trend Micro Apex One（オンプレミス・SaaS）や Worry‑Free Business Security、Worry‑Free Business Security Services のサードパーティ製アンインストール機能を操作して任意のコマンドを実行できる脆弱性です。", "risk": "管理コンソールにログイン可能な攻撃者により、セキュリティエージェントがインストールされた端末上でシステム権限で任意のコードが実行される可能性があります。", "product": "Trend Micro Apex One / Trend Micro Worry-Free Business Security / Trend Micro Worry-Free Business Security Services", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "trendmicro", "cvssVector": null, "affected": [ { "product": "Trend Micro Apex One", "range": ">= 2019 (14.0) / < 14.0.0.12380" }, { "product": "Trend Micro Apex One", "range": ">= SaaS / < 14.0.12637" }, { "product": "Trend Micro Worry-Free Business Security", "range": ">= 10.0 SP1 / < 10.0 SP1 Build 2495" }, { "product": "Trend Micro Worry-Free Business Security Services", "range": ">= SaaS / < 6.7.3578 / 14.3.1105" } ], "fixed": [], "steps": [ "ベンダが提供するパッチを適用してください（Apex One 2019 Patch1(b12380)、ウイルスバスタービジネスセキュリティ 10.0 SP1 Patch 2495、Apex One SaaS はエージェント 14.0.12637、ウイルスバスタービジネスセキュリティサービスは 2023年7月31日のアップデートで修正済み）。", "「CVE-2023-41179」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://jvn.jp/vu/JVNVU90967486/", "label": "CVE：trendmicro" }, { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41179.json", "label": "CVE：trendmicro" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41179", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-41179", "label": "CVE公式レコード" }, { "url": "https://success.trendmicro.com/solution/000294994", "label": "CVE掲載の参考情報" }, { "url": "https://success.trendmicro.com/jp/solution/000294706", "label": "CVE掲載の参考情報" }, { "url": "https://jvn.jp/en/vu/JVNVU90967486/", "label": "CVE掲載の参考情報" }, { "url": "https://success.trendmicro.com/dcx/s/solution/000294994?language=en_US", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-41179", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-09-19T13:44:57.831Z", "modifiedAt": "2025-10-21T23:05:37.728Z", "fetchedAt": "2026-10-25T05:33:13.995Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate the module to execute arbitrary commands on an affected installation.\r\n\r\nNote that an attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Trend Micro, Inc.", "product": "Trend Micro Apex One", "versions": [ { "version": "2019 (14.0)", "status": "affected", "versionType": "semver", "lessThan": "14.0.0.12380" } ] }, { "vendor": "Trend Micro, Inc.", "product": "Trend Micro Apex One", "versions": [ { "version": "SaaS", "status": "affected", "versionType": "semver", "lessThan": "14.0.12637" } ] }, { "vendor": "Trend Micro, Inc.", "product": "Trend Micro Worry-Free Business Security", "versions": [ { "version": "10.0 SP1", "status": "affected", "versionType": "semver", "lessThan": "10.0 SP1 Build 2495" } ] }, { "vendor": "Trend Micro, Inc.", "product": "Trend Micro Worry-Free Business Security Services", "versions": [ { "version": "SaaS", "status": "affected", "versionType": "semver", "lessThan": "6.7.3578 / 14.3.1105" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-41179", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41179.json", "fetchedAt": "2026-10-25T05:33:13.995Z", "publishedAt": "2023-09-19T13:44:57.831Z", "modifiedAt": "2025-10-21T23:05:37.728Z", "state": "published", "provider": "trendmicro", "title": "", "descriptions": [ { "lang": "en", "value": "A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate the module to execute arbitrary commands on an affected installation.\r\n\r\nNote that an attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Trend Micro Apex One and Worry-Free Business Security contain an unspecified vulnerability in the third-party anti-virus uninstaller that could allow an attacker to manipulate the module to conduct remote code execution. An attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41179", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Trend Micro, Inc.", "product": "Trend Micro Apex One", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "2019 (14.0)", "lessThan": "14.0.0.12380", "versionType": "semver", "status": "affected" } ] }, { "vendor": "Trend Micro, Inc.", "product": "Trend Micro Apex One", "sourcePath": "/containers/cna/affected/1", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "SaaS", "lessThan": "14.0.12637", "versionType": "semver", "status": "affected" } ] }, { "vendor": "Trend Micro, Inc.", "product": "Trend Micro Worry-Free Business Security", "sourcePath": "/containers/cna/affected/2", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "10.0 SP1", "lessThan": "10.0 SP1 Build 2495", "versionType": "semver", "status": "affected" } ] }, { "vendor": "Trend Micro, Inc.", "product": "Trend Micro Worry-Free Business Security Services", "sourcePath": "/containers/cna/affected/3", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "SaaS", "lessThan": "6.7.3578 / 14.3.1105", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.2, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://success.trendmicro.com/solution/000294994", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://success.trendmicro.com/jp/solution/000294706", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://jvn.jp/en/vu/JVNVU90967486/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41179", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41179.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Trend Micro, Inc.\",\"product\":\"Trend Micro Apex One\",\"versions\":[{\"version\":\"2019 (14.0)\",\"status\":\"affected\",\"versionType\":\"semver\",\"lessThan\":\"14.0.0.12380\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41179.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Trend Micro, Inc.\",\"product\":\"Trend Micro Apex One\",\"versions\":[{\"version\":\"SaaS\",\"status\":\"affected\",\"versionType\":\"semver\",\"lessThan\":\"14.0.12637\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41179.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Trend Micro, Inc.\",\"product\":\"Trend Micro Worry-Free Business Security\",\"versions\":[{\"version\":\"10.0 SP1\",\"status\":\"affected\",\"versionType\":\"semver\",\"lessThan\":\"10.0 SP1 Build 2495\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41179.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"Trend Micro, Inc.\",\"product\":\"Trend Micro Worry-Free Business Security Services\",\"versions\":[{\"version\":\"SaaS\",\"status\":\"affected\",\"versionType\":\"semver\",\"lessThan\":\"6.7.3578 / 14.3.1105\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41179.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate the module to execute arbitrary commands on an affected installation.\r\n\r\nNote that an attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41179.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.2,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"HIGH\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-41179:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41179", "sourcePath": "retained:/originalText", "text": "Trend Micro Apex One and Worry-Free Business Security contain an unspecified vulnerability in the third-party anti-virus uninstaller that could allow an attacker to manipulate the module to conduct remote code execution. An attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-41179:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41179", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "linked:JVNVU90967486:section:概要", "sourceUrl": "https://jvn.jp/vu/JVNVU90967486/", "sourcePath": "section:概要", "text": "複数のトレンドマイクロ製企業向けエンドポイントセキュリティ製品には、任意のコードが実行可能な脆弱性が存在します。", "truncated": false, "representation": "source_excerpt", "relatedCve": "CVE-2023-41179", "relatedJvn": "JVNVU90967486" }, { "evidenceId": "linked:JVNVU90967486:section:影響を受けるシステム", "sourceUrl": "https://jvn.jp/vu/JVNVU90967486/", "sourcePath": "section:影響を受けるシステム", "text": "Apex One 2019\n\nApex One SaaS\n\nウイルスバスタービジネスセキュリティ 10.0 SP1\n\nウイルスバスタービジネスセキュリティサービス", "truncated": false, "representation": "source_excerpt", "relatedCve": "CVE-2023-41179", "relatedJvn": "JVNVU90967486" }, { "evidenceId": "linked:JVNVU90967486:section:詳細情報", "sourceUrl": "https://jvn.jp/vu/JVNVU90967486/", "sourcePath": "section:詳細情報", "text": "トレンドマイクロ株式会社が提供する複数の企業向けエンドポイントセキュリティ製品には、サードパーティ製セキュリティ製品をアンインストールする機能において任意のコードが実行可能な脆弱性（ CWE-94 、 CVE-2023-41179 ）が存在します。\n\nなお、開発者により本脆弱性を悪用した攻撃が確認されています。", "truncated": false, "representation": "source_excerpt", "relatedCve": "CVE-2023-41179", "relatedJvn": "JVNVU90967486" }, { "evidenceId": "linked:JVNVU90967486:section:想定される影響", "sourceUrl": "https://jvn.jp/vu/JVNVU90967486/", "sourcePath": "section:想定される影響", "text": "当該製品の管理コンソールにログイン可能な攻撃者によって、セキュリティエージェントがインストールされている端末上で、システム権限で任意のコードを実行される可能性があります。", "truncated": false, "representation": "source_excerpt", "relatedCve": "CVE-2023-41179", "relatedJvn": "JVNVU90967486" }, { "evidenceId": "linked:JVNVU90967486:section:対策方法", "sourceUrl": "https://jvn.jp/vu/JVNVU90967486/", "sourcePath": "section:対策方法", "text": "パッチを適用する\n\n開発者が提供する情報をもとにパッチを適用してください。\n\n開発者は本脆弱性の対策として次のパッチをリリースしています。\n\nApex One 2019 Patch1(b12380)\n\nウイルスバスタービジネスセキュリティ 10.0 SP1 Patch 2495\n\nなお、Apex One SaaSは2023年7月のメンテナンスで修正済み（エージェント：14.0.12637）、ウイルスバスタービジネスセキュリティサービスは2023年7月31日のアップデートで修正済みです。\n\nワークアラウンドを実施する\n\n次の回避策を適用することで、本脆弱性の影響を軽減することが可能です。\n\n当該製品の管理コンソールへのアクセスを、信頼できるネットワークからのみに制限する", "truncated": false, "representation": "source_excerpt", "relatedCve": "CVE-2023-41179", "relatedJvn": "JVNVU90967486" }, { "evidenceId": "linked:JVNVU90967486:section:ベンダ情報", "sourceUrl": "https://jvn.jp/vu/JVNVU90967486/", "sourcePath": "section:ベンダ情報", "text": "ベンダ\n\nリンク\n\nトレンドマイクロ株式会社\n\nアラート/アドバイザリ：トレンドマイクロのエンドポイント向け製品のサードパーティセキュリティ製品をアンインストールする機能における任意コード実行の脆弱性について\n\n【注意喚起】弊社製品の脆弱性を悪用した攻撃を確認したことによる修正プログラム適用のお願い（CVE-2023-41179）", "truncated": false, "representation": "source_excerpt", "relatedCve": "CVE-2023-41179", "relatedJvn": "JVNVU90967486" } ], "limits": { "completeness": "official_record_with_linked_advisories", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。 CVEが直接参照しているJVN記事の日本語本文を、記事中のCVE番号を照合して追加しています。", "excludedJvnSources": [] }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41179", "modifiedAt": "2023-09-21T00:00:00.000Z", "fetchedAt": "2026-10-25T05:17:50.551Z", "retained": true }, { "sourceType": "JVN", "sourceUrl": "https://jvn.jp/vu/JVNVU90967486/", "id": "JVNVU90967486", "modifiedAt": "2023-09-18T15:00:00.000Z" } ], "relatedDocuments": [ { "type": "jvn", "id": "JVNVU90967486", "sourceUrl": "https://jvn.jp/vu/JVNVU90967486/", "modifiedAt": "2023-09-18T15:00:00.000Z", "affectedStatements": [ { "lang": "ja", "value": "Apex One 2019\n\nApex One SaaS\n\nウイルスバスタービジネスセキュリティ 10.0 SP1\n\nウイルスバスタービジネスセキュリティサービス", "sourcePath": "section:影響を受けるシステム" } ], "solutions": [ { "lang": "ja", "value": "パッチを適用する\n\n開発者が提供する情報をもとにパッチを適用してください。\n\n開発者は本脆弱性の対策として次のパッチをリリースしています。\n\nApex One 2019 Patch1(b12380)\n\nウイルスバスタービジネスセキュリティ 10.0 SP1 Patch 2495\n\nなお、Apex One SaaSは2023年7月のメンテナンスで修正済み（エージェント：14.0.12637）、ウイルスバスタービジネスセキュリティサービスは2023年7月31日のアップデートで修正済みです。\n\nワークアラウンドを実施する\n\n次の回避策を適用することで、本脆弱性の影響を軽減することが可能です。\n\n当該製品の管理コンソールへのアクセスを、信頼できるネットワークからのみに制限する", "sourcePath": "section:対策方法" } ] } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:37.728Z", "fetchedAt": "2026-10-25T05:33:13.995Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-09-21T00:00:00.000Z", "fetchedAt": "2026-10-25T05:17:50.551Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Trend Micro Apex One / Trend Micro Worry-Free Business Security / Trend Micro Worry-Free Business Security Servicesにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-25T05:33:13.995Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "4b5e7662dab0a1144f9fccaedc89775ed854c937cb1077c043d0a7edcff0e975", "sourceModifiedAt": "2025-10-21T23:05:37.728Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "攻撃者が管理コンソールへのアクセス権を取得すると、Trend Micro Apex One（オンプレミス・SaaS）や Worry‑Free Business Security、Worry‑Free Business Security Services のサードパーティ製アンインストール機能を操作して任意のコマンドを実行できる脆弱性です。", "risk": "管理コンソールにログイン可能な攻撃者により、セキュリティエージェントがインストールされた端末上でシステム権限で任意のコードが実行される可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "攻撃を実行するには、対象システムの管理コンソールへの管理者権限アクセスが必要です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41179.json" ], "evidenceIds": [ "E1" ] }, { "text": "対象は Trend Micro Apex One（オンプレミス・SaaS）、Worry‑Free Business Security、Worry‑Free Business Security Services のサードパーティ製アンインストール機能です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41179.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Trend Micro, Inc. / Trend Micro Apex One。影響ありとして記載：2019 (14.0)以上、14.0.0.12380未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41179.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Trend Micro, Inc. / Trend Micro Apex One。影響ありとして記載：SaaS以上、14.0.12637未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41179.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Trend Micro, Inc. / Trend Micro Worry-Free Business Security。影響ありとして記載：10.0 SP1以上、10.0 SP1 Build 2495未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41179.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Trend Micro, Inc. / Trend Micro Worry-Free Business Security Services。影響ありとして記載：SaaS以上、6.7.3578 / 14.3.1105未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41179.json" ], "evidenceIds": [ "E6" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41179" ], "evidenceIds": [ "E8" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41179.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Trend Micro Apex One / Trend Micro Worry-Free Business Security / Trend Micro Worry-Free Business Security Services」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-41179", "https://success.trendmicro.com/solution/000294994", "https://success.trendmicro.com/jp/solution/000294706", "https://jvn.jp/en/vu/JVNVU90967486/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41179", "https://success.trendmicro.com/dcx/s/solution/000294994?language=en_US", "https://nvd.nist.gov/vuln/detail/CVE-2023-41179" ] } ], "actions": [ { "text": "ベンダが提供するパッチを適用してください（Apex One 2019 Patch1(b12380)、ウイルスバスタービジネスセキュリティ 10.0 SP1 Patch 2495、Apex One SaaS はエージェント 14.0.12637、ウイルスバスタービジネスセキュリティサービスは 2023年7月31日のアップデートで修正済み）。", "kind": "fix", "sourceUrls": [ "https://jvn.jp/vu/JVNVU90967486/" ], "evidenceIds": [ "E7" ] }, { "text": "「CVE-2023-41179」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-41179", "https://success.trendmicro.com/solution/000294994", "https://success.trendmicro.com/jp/solution/000294706", "https://jvn.jp/en/vu/JVNVU90967486/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41179", "https://success.trendmicro.com/dcx/s/solution/000294994?language=en_US", "https://nvd.nist.gov/vuln/detail/CVE-2023-41179" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-41179", "https://success.trendmicro.com/solution/000294994", "https://success.trendmicro.com/jp/solution/000294706", "https://jvn.jp/en/vu/JVNVU90967486/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41179", "https://success.trendmicro.com/dcx/s/solution/000294994?language=en_US", "https://nvd.nist.gov/vuln/detail/CVE-2023-41179" ] } ], "temporaryMitigations": [ { "text": "当該製品の管理コンソールへのアクセスを、信頼できるネットワークからのみに制限してください。", "kind": "fix", "sourceUrls": [ "https://jvn.jp/vu/JVNVU90967486/" ], "evidenceIds": [ "E7" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41179.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-41179", "https://success.trendmicro.com/solution/000294994", "https://success.trendmicro.com/jp/solution/000294706", "https://jvn.jp/en/vu/JVNVU90967486/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41179", "https://success.trendmicro.com/dcx/s/solution/000294994?language=en_US", "https://nvd.nist.gov/vuln/detail/CVE-2023-41179" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://jvn.jp/vu/JVNVU90967486/", "label": "CVE：trendmicro" }, { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41179.json", "label": "CVE：trendmicro" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41179", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-41179", "label": "CVE公式レコード" }, { "url": "https://success.trendmicro.com/solution/000294994", "label": "CVE掲載の参考情報" }, { "url": "https://success.trendmicro.com/jp/solution/000294706", "label": "CVE掲載の参考情報" }, { "url": "https://jvn.jp/en/vu/JVNVU90967486/", "label": "CVE掲載の参考情報" }, { "url": "https://success.trendmicro.com/dcx/s/solution/000294994?language=en_US", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-41179", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41179.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate the module to execute arbitrary commands on an affected installation.\r\n\r\nNote that an attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://jvn.jp/vu/JVNVU90967486/", "sourceField": "section:想定される影響", "excerpt": "当該製品の管理コンソールにログイン可能な攻撃者によって、セキュリティエージェントがインストールされている端末上で、システム権限で任意のコードを実行される可能性があります。", "language": null, "representation": "source_excerpt" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41179.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Trend Micro, Inc.\",\"product\":\"Trend Micro Apex One\",\"versions\":[{\"version\":\"2019 (14.0)\",\"status\":\"affected\",\"versionType\":\"semver\",\"lessThan\":\"14.0.0.12380\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41179.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Trend Micro, Inc.\",\"product\":\"Trend Micro Apex One\",\"versions\":[{\"version\":\"SaaS\",\"status\":\"affected\",\"versionType\":\"semver\",\"lessThan\":\"14.0.12637\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41179.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Trend Micro, Inc.\",\"product\":\"Trend Micro Worry-Free Business Security\",\"versions\":[{\"version\":\"10.0 SP1\",\"status\":\"affected\",\"versionType\":\"semver\",\"lessThan\":\"10.0 SP1 Build 2495\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41179.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"Trend Micro, Inc.\",\"product\":\"Trend Micro Worry-Free Business Security Services\",\"versions\":[{\"version\":\"SaaS\",\"status\":\"affected\",\"versionType\":\"semver\",\"lessThan\":\"6.7.3578 / 14.3.1105\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://jvn.jp/vu/JVNVU90967486/", "sourceField": "section:対策方法", "excerpt": "パッチを適用する\n\n開発者が提供する情報をもとにパッチを適用してください。\n\n開発者は本脆弱性の対策として次のパッチをリリースしています。\n\nApex One 2019 Patch1(b12380)\n\nウイルスバスタービジネスセキュリティ 10.0 SP1 Patch 2495\n\nなお、Apex One SaaSは2023年7月のメンテナンスで修正済み（エージェント：14.0.12637）、ウイルスバスタービジネスセキュリティサービスは2023年7月31日のアップデートで修正済みです。\n\nワークアラウンドを実施する\n\n次の回避策を適用することで、本脆弱性の影響を軽減することが可能です。\n\n当該製品の管理コンソールへのアクセスを、信頼できるネットワークからのみに制限する", "language": null, "representation": "source_excerpt" }, { "id": "E8", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41179", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-41179\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-41179（Trend Micro Apex One / Trend Micro Worry-Free Business Security / Trend Micro Worry-Free Business Security Services）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃を実行するには、対象システムの管理コンソールへの管理者権限アクセスが必要です。\n・対象は Trend Micro Apex One（オンプレミス・SaaS）、Worry‑Free Business Security、Worry‑Free Business Security Services のサードパーティ製アンインストール機能です。\n・公式の対象表：Trend Micro, Inc. / Trend Micro Apex One。影響ありとして記載：2019 (14.0)以上、14.0.0.12380未満。\n・公式の対象表：Trend Micro, Inc. / Trend Micro Apex One。影響ありとして記載：SaaS以上、14.0.12637未満。\n・公式の対象表：Trend Micro, Inc. / Trend Micro Worry-Free Business Security。影響ありとして記載：10.0 SP1以上、10.0 SP1 Build 2495未満。\n・公式の対象表：Trend Micro, Inc. / Trend Micro Worry-Free Business Security Services。影響ありとして記載：SaaS以上、6.7.3578 / 14.3.1105未満。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-41179", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-25T05:33:13.995Z", "lastSuccess": "2026-10-25T05:33:13.995Z", "sourceCheckedAt": "2026-10-25T05:33:13.995Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2023-28434", "aliases": [], "title": "minio：権限の奪取", "summary": "MinIO は Linux/MacOS 向けに特権昇格の脆弱性があります。2023 年 3 月 20 日 20:16:18 以前のリリースでは、攻撃者が細工されたリクエストを使ってメタデータバケット名のチェックを回避し、`PostPolicyBucket` の処理中に任意のバケットへオブジェクトを配置でき、特権昇格が可能です。攻撃には `arn:aws:s3:::*` 権限を持つ認証情報と Console API アクセスの有効化が必要です。この問題は RELEASE.2023-03-20T20-16-18Z で修正され、回避策としてブラウザ API アクセスを有効にし、`MINIO_BROWSER=off` をオフにします。", "risk": "攻撃者は任意のバケットにオブジェクトを配置でき、特権昇格が可能になる。", "product": "minio", "category": "other", "component": "package", "severity": "high", "cvss": 8.8, "cvssVersion": "3.1", "cvssSource": "GitHub_M", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "minio", "range": "< RELEASE.2023-03-20T20-16-18Z" } ], "fixed": [], "steps": [ "MinIO を RELEASE.2023-03-20T20-16-18Z 以降のバージョンにアップデートするか、回避策としてブラウザ API アクセスを有効にし、`MINIO_BROWSER=off` をオフにしてください。", "「CVE-2023-28434」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28434.json", "label": "CVE：GitHub_M" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28434", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-28434", "label": "CVE公式レコード" }, { "url": "https://github.com/minio/minio/security/advisories/GHSA-2pxw-r47w-4p8c", "label": "CISAが示す関連情報" }, { "url": "https://github.com/minio/minio/pull/16849", "label": "https://github.com/minio/minio/pull/16849" }, { "url": "https://github.com/minio/minio/commit/67f4ba154a27a1b06e48bfabda38355a010dfca5", "label": "https://github.com/minio/minio/commit/67f4ba154a27a1b06e48bfabda38355a010dfca5" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28434", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-03-22T20:44:04.216Z", "modifiedAt": "2025-10-21T23:15:22.302Z", "fetchedAt": "2026-10-25T05:33:15.784Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Minio is a Multi-Cloud Object Storage framework. Prior to RELEASE.2023-03-20T20-16-18Z, an attacker can use crafted requests to bypass metadata bucket name checking and put an object into any bucket while processing `PostPolicyBucket`. To carry out this attack, the attacker requires credentials with `arn:aws:s3:::*` permission, as well as enabled Console API access. This issue has been patched in RELEASE.2023-03-20T20-16-18Z. As a workaround, enable browser API access and turn off `MINIO_BROWSER=off`.", "sourceTitle": "MinIO is vulnerable to privilege escalation on Linux/MacOS", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "minio", "product": "minio", "versions": [ { "version": "< RELEASE.2023-03-20T20-16-18Z", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-28434", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28434.json", "fetchedAt": "2026-10-25T05:33:15.784Z", "publishedAt": "2023-03-22T20:44:04.216Z", "modifiedAt": "2025-10-21T23:15:22.302Z", "state": "published", "provider": "GitHub_M", "title": "MinIO is vulnerable to privilege escalation on Linux/MacOS", "descriptions": [ { "lang": "en", "value": "Minio is a Multi-Cloud Object Storage framework. Prior to RELEASE.2023-03-20T20-16-18Z, an attacker can use crafted requests to bypass metadata bucket name checking and put an object into any bucket while processing `PostPolicyBucket`. To carry out this attack, the attacker requires credentials with `arn:aws:s3:::*` permission, as well as enabled Console API access. This issue has been patched in RELEASE.2023-03-20T20-16-18Z. As a workaround, enable browser API access and turn off `MINIO_BROWSER=off`.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "MinIO contains a security feature bypass vulnerability that allows an attacker to use crafted requests to bypass metadata bucket name checking and put an object into any bucket while processing `PostPolicyBucket` to conduct privilege escalation. To carry out this attack, the attacker requires credentials with `arn:aws:s3:::*` permission, as well as enabled Console API access.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28434", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "minio", "product": "minio", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "< RELEASE.2023-03-20T20-16-18Z", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-269", "lang": "en", "description": "CWE-269: Improper Privilege Management", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "GitHub_M", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://github.com/minio/minio/security/advisories/GHSA-2pxw-r47w-4p8c", "label": "https://github.com/minio/minio/security/advisories/GHSA-2pxw-r47w-4p8c", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://github.com/minio/minio/pull/16849", "label": "https://github.com/minio/minio/pull/16849", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://github.com/minio/minio/commit/67f4ba154a27a1b06e48bfabda38355a010dfca5", "label": "https://github.com/minio/minio/commit/67f4ba154a27a1b06e48bfabda38355a010dfca5", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-28434", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28434.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"minio\",\"product\":\"minio\",\"versions\":[{\"version\":\"< RELEASE.2023-03-20T20-16-18Z\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28434.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Minio is a Multi-Cloud Object Storage framework. Prior to RELEASE.2023-03-20T20-16-18Z, an attacker can use crafted requests to bypass metadata bucket name checking and put an object into any bucket while processing `PostPolicyBucket`. To carry out this attack, the attacker requires credentials with `arn:aws:s3:::*` permission, as well as enabled Console API access. This issue has been patched in RELEASE.2023-03-20T20-16-18Z. As a workaround, enable browser API access and turn off `MINIO_BROWSER=off`.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28434.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-269\",\"lang\":\"en\",\"description\":\"CWE-269: Improper Privilege Management\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28434.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-28434:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28434", "sourcePath": "retained:/originalText", "text": "MinIO contains a security feature bypass vulnerability that allows an attacker to use crafted requests to bypass metadata bucket name checking and put an object into any bucket while processing `PostPolicyBucket` to conduct privilege escalation. To carry out this attack, the attacker requires credentials with `arn:aws:s3:::*` permission, as well as enabled Console API access.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-28434:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28434", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28434", "modifiedAt": "2023-09-19T00:00:00.000Z", "fetchedAt": "2026-10-25T05:17:50.551Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:15:22.302Z", "fetchedAt": "2026-10-25T05:33:15.784Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-09-19T00:00:00.000Z", "fetchedAt": "2026-10-25T05:17:50.551Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "minioに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "本来与えられていない権限で、操作される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-25T05:33:15.784Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "01c4d7254e61efa5f6e95b9d9ebfb0e1da2041d98abb36d941df8b325a236f66", "sourceModifiedAt": "2025-10-21T23:15:22.302Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "MinIO は Linux/MacOS 向けに特権昇格の脆弱性があります。2023 年 3 月 20 日 20:16:18 以前のリリースでは、攻撃者が細工されたリクエストを使ってメタデータバケット名のチェックを回避し、`PostPolicyBucket` の処理中に任意のバケットへオブジェクトを配置でき、特権昇格が可能です。攻撃には `arn:aws:s3:::*` 権限を持つ認証情報と Console API アクセスの有効化が必要です。この問題は RELEASE.2023-03-20T20-16-18Z で修正され、回避策としてブラウザ API アクセスを有効にし、`MINIO_BROWSER=off` をオフにします。", "risk": "攻撃者は任意のバケットにオブジェクトを配置でき、特権昇格が可能になる。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "攻撃者は `arn:aws:s3:::*` 権限を持つ認証情報が必要です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28434.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28434" ], "evidenceIds": [ "E1", "E3", "E2" ] }, { "text": "Console API アクセスが有効である必要があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28434.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28434" ], "evidenceIds": [ "E1", "E3", "E2" ] }, { "text": "攻撃は `PostPolicyBucket` の処理中にメタデータバケット名チェックを回避し、任意のバケットにオブジェクトを配置できる細工されたリクエストを使用します。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28434.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "対象は MinIO のバージョンが RELEASE.2023-03-20T20-16-18Z より前であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28434.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：minio / minio。影響ありとして記載：< RELEASE.2023-03-20T20-16-18Z。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28434.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28434" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28434.json" ], "evidenceIds": [ "E4" ] }, { "text": "「minio」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-28434", "https://github.com/minio/minio/security/advisories/GHSA-2pxw-r47w-4p8c", "https://github.com/minio/minio/pull/16849", "https://github.com/minio/minio/commit/67f4ba154a27a1b06e48bfabda38355a010dfca5", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28434", "https://nvd.nist.gov/vuln/detail/CVE-2023-28434" ] } ], "actions": [ { "text": "MinIO を RELEASE.2023-03-20T20-16-18Z 以降のバージョンにアップデートするか、回避策としてブラウザ API アクセスを有効にし、`MINIO_BROWSER=off` をオフにしてください。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28434.json" ], "evidenceIds": [ "E1" ] }, { "text": "「CVE-2023-28434」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-28434", "https://github.com/minio/minio/security/advisories/GHSA-2pxw-r47w-4p8c", "https://github.com/minio/minio/pull/16849", "https://github.com/minio/minio/commit/67f4ba154a27a1b06e48bfabda38355a010dfca5", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28434", "https://nvd.nist.gov/vuln/detail/CVE-2023-28434" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-28434", "https://github.com/minio/minio/security/advisories/GHSA-2pxw-r47w-4p8c", "https://github.com/minio/minio/pull/16849", "https://github.com/minio/minio/commit/67f4ba154a27a1b06e48bfabda38355a010dfca5", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28434", "https://nvd.nist.gov/vuln/detail/CVE-2023-28434" ] } ], "temporaryMitigations": [ { "text": "ブラウザ API アクセスを有効にし、`MINIO_BROWSER=off` をオフにする。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28434.json" ], "evidenceIds": [ "E1" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28434.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-28434", "https://github.com/minio/minio/security/advisories/GHSA-2pxw-r47w-4p8c", "https://github.com/minio/minio/pull/16849", "https://github.com/minio/minio/commit/67f4ba154a27a1b06e48bfabda38355a010dfca5", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28434", "https://nvd.nist.gov/vuln/detail/CVE-2023-28434" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28434.json", "label": "CVE：GitHub_M" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28434", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-28434", "label": "CVE公式レコード" }, { "url": "https://github.com/minio/minio/security/advisories/GHSA-2pxw-r47w-4p8c", "label": "CISAが示す関連情報" }, { "url": "https://github.com/minio/minio/pull/16849", "label": "https://github.com/minio/minio/pull/16849" }, { "url": "https://github.com/minio/minio/commit/67f4ba154a27a1b06e48bfabda38355a010dfca5", "label": "https://github.com/minio/minio/commit/67f4ba154a27a1b06e48bfabda38355a010dfca5" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28434", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28434.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Minio is a Multi-Cloud Object Storage framework. Prior to RELEASE.2023-03-20T20-16-18Z, an attacker can use crafted requests to bypass metadata bucket name checking and put an object into any bucket while processing `PostPolicyBucket`. To carry out this attack, the attacker requires credentials with `arn:aws:s3:::*` permission, as well as enabled Console API access. This issue has been patched in RELEASE.2023-03-20T20-16-18Z. As a workaround, enable browser API access and turn off `MINIO_BROWSER=off`.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28434.json", "sourceField": "/containers/cna/title", "excerpt": "MinIO is vulnerable to privilege escalation on Linux/MacOS", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28434", "sourceField": "retained:/originalText", "excerpt": "MinIO contains a security feature bypass vulnerability that allows an attacker to use crafted requests to bypass metadata bucket name checking and put an object into any bucket while processing `PostPolicyBucket` to conduct privilege escalation. To carry out this attack, the attacker requires credentials with `arn:aws:s3:::*` permission, as well as enabled Console API access.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28434.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"minio\",\"product\":\"minio\",\"versions\":[{\"version\":\"< RELEASE.2023-03-20T20-16-18Z\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28434", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-28434\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-28434（minio）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者は `arn:aws:s3:::*` 権限を持つ認証情報が必要です。\n・Console API アクセスが有効である必要があります。\n・攻撃は `PostPolicyBucket` の処理中にメタデータバケット名チェックを回避し、任意のバケットにオブジェクトを配置できる細工されたリクエストを使用します。\n・対象は MinIO のバージョンが RELEASE.2023-03-20T20-16-18Z より前であること。\n・公式の対象表：minio / minio。影響ありとして記載：< RELEASE.2023-03-20T20-16-18Z。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-28434", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-25T05:33:15.784Z", "lastSuccess": "2026-10-25T05:33:15.784Z", "sourceCheckedAt": "2026-10-25T05:33:15.784Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2014-8361", "aliases": [], "title": "n/a：コード実行", "summary": "Realtek SDK の miniigd SOAP サービスは、リモートの攻撃者が細工した NewInternalClient リクエストを送ることで任意のコードを実行できるようになります。この脆弱性は 2023 年までに実際に悪用されています。", "risk": "攻撃者はサーバー上で任意のコードを実行させられる可能性があります。", "product": "Realtek SDK", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "mitre", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "「CVE-2014-8361」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2014/8xxx/CVE-2014-8361.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-8361", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2014-8361", "label": "CVE公式レコード" }, { "url": "http://www.zerodayinitiative.com/advisories/ZDI-15-155/", "label": "CVE掲載の参考情報" }, { "url": "http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/132090/Realtek-SDK-Miniigd-UPnP-SOAP-Command-Execution.html", "label": "CVE掲載の参考情報" }, { "url": "http://www.securityfocus.com/bid/74330", "label": "74330" }, { "url": "https://www.exploit-db.com/exploits/37169/", "label": "37169" }, { "url": "http://jvn.jp/en/jp/JVN47580234/index.html", "label": "JVN#47580234" }, { "url": "http://jvn.jp/en/jp/JVN67456944/index.html", "label": "JVN#67456944" }, { "url": "https://sensorstechforum.com/hinatabot-cve-2014-8361-ddos/", "label": "CVE掲載の参考情報" }, { "url": "https://web.archive.org/web/20150909230440/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055", "label": "CVE掲載の参考情報" }, { "url": "https://web.archive.org/web/20150831100501/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8361", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2015-05-01T00:00:00.000Z", "modifiedAt": "2025-10-21T23:56:01.609Z", "fetchedAt": "2026-10-25T05:33:22.282Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "n/a", "product": "n/a", "versions": [ { "version": "n/a", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2014-8361", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2014/8xxx/CVE-2014-8361.json", "fetchedAt": "2026-10-25T05:33:22.282Z", "publishedAt": "2015-05-01T00:00:00.000Z", "modifiedAt": "2025-10-21T23:56:01.609Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Realtek SDK contains an improper input validation vulnerability in the miniigd SOAP service that allows remote attackers to execute malicious code via a crafted NewInternalClient request.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-8361", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "http://www.zerodayinitiative.com/advisories/ZDI-15-155/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "http://packetstormsecurity.com/files/132090/Realtek-SDK-Miniigd-UPnP-SOAP-Command-Execution.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "http://www.securityfocus.com/bid/74330", "label": "74330", "tags": [ "vdb-entry", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "https://www.exploit-db.com/exploits/37169/", "label": "37169", "tags": [ "exploit", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/4" }, { "url": "http://jvn.jp/en/jp/JVN47580234/index.html", "label": "JVN#47580234", "tags": [ "third-party-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/5" }, { "url": "http://jvn.jp/en/jp/JVN67456944/index.html", "label": "JVN#67456944", "tags": [ "third-party-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/6" }, { "url": "https://sensorstechforum.com/hinatabot-cve-2014-8361-ddos/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/7" }, { "url": "https://web.archive.org/web/20150909230440/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/8" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-8361", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2014/8xxx/CVE-2014-8361.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2014/8xxx/CVE-2014-8361.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2014/8xxx/CVE-2014-8361.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"type\":\"text\",\"lang\":\"en\",\"description\":\"n/a\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2014/8xxx/CVE-2014-8361.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":9.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2014-8361:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-8361", "sourcePath": "retained:/originalText", "text": "Realtek SDK contains an improper input validation vulnerability in the miniigd SOAP service that allows remote attackers to execute malicious code via a crafted NewInternalClient request.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2014-8361:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-8361", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-8361", "modifiedAt": "2023-09-18T00:00:00.000Z", "fetchedAt": "2026-10-25T05:17:50.551Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:56:01.609Z", "fetchedAt": "2026-10-25T05:33:22.282Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-09-18T00:00:00.000Z", "fetchedAt": "2026-10-25T05:17:50.551Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "n/aにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-25T05:33:22.282Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "ef5a6fa493afcc0de38559eb054592f49c545c118e95127360a3c3aae238591f", "sourceModifiedAt": "2025-10-21T23:56:01.609Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Realtek SDK の miniigd SOAP サービスは、リモートの攻撃者が細工した NewInternalClient リクエストを送ることで任意のコードを実行できるようになります。この脆弱性は 2023 年までに実際に悪用されています。", "risk": "攻撃者はサーバー上で任意のコードを実行させられる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "攻撃者はリモートから対象デバイスにアクセスでき、対象が Realtek SDK の miniigd SOAP サービスを実行している必要があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2014/8xxx/CVE-2014-8361.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-8361" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "攻撃者は細工した NewInternalClient リクエストを送信できる必要があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2014/8xxx/CVE-2014-8361.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-8361" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2014/8xxx/CVE-2014-8361.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-8361" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2014/8xxx/CVE-2014-8361.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Realtek SDK」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2014-8361", "http://www.zerodayinitiative.com/advisories/ZDI-15-155/", "http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055", "http://packetstormsecurity.com/files/132090/Realtek-SDK-Miniigd-UPnP-SOAP-Command-Execution.html", "http://www.securityfocus.com/bid/74330", "https://www.exploit-db.com/exploits/37169/", "http://jvn.jp/en/jp/JVN47580234/index.html", "http://jvn.jp/en/jp/JVN67456944/index.html", "https://sensorstechforum.com/hinatabot-cve-2014-8361-ddos/", "https://web.archive.org/web/20150909230440/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-8361", "https://web.archive.org/web/20150831100501/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055", "https://nvd.nist.gov/vuln/detail/CVE-2014-8361" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-8361" ], "evidenceIds": [ "E4", "E5" ] }, { "text": "「CVE-2014-8361」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2014-8361", "http://www.zerodayinitiative.com/advisories/ZDI-15-155/", "http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055", "http://packetstormsecurity.com/files/132090/Realtek-SDK-Miniigd-UPnP-SOAP-Command-Execution.html", "http://www.securityfocus.com/bid/74330", "https://www.exploit-db.com/exploits/37169/", "http://jvn.jp/en/jp/JVN47580234/index.html", "http://jvn.jp/en/jp/JVN67456944/index.html", "https://sensorstechforum.com/hinatabot-cve-2014-8361-ddos/", "https://web.archive.org/web/20150909230440/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-8361", "https://web.archive.org/web/20150831100501/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055", "https://nvd.nist.gov/vuln/detail/CVE-2014-8361" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2014-8361", "http://www.zerodayinitiative.com/advisories/ZDI-15-155/", "http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055", "http://packetstormsecurity.com/files/132090/Realtek-SDK-Miniigd-UPnP-SOAP-Command-Execution.html", "http://www.securityfocus.com/bid/74330", "https://www.exploit-db.com/exploits/37169/", "http://jvn.jp/en/jp/JVN47580234/index.html", "http://jvn.jp/en/jp/JVN67456944/index.html", "https://sensorstechforum.com/hinatabot-cve-2014-8361-ddos/", "https://web.archive.org/web/20150909230440/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-8361", "https://web.archive.org/web/20150831100501/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055", "https://nvd.nist.gov/vuln/detail/CVE-2014-8361" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2014-8361", "http://www.zerodayinitiative.com/advisories/ZDI-15-155/", "http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055", "http://packetstormsecurity.com/files/132090/Realtek-SDK-Miniigd-UPnP-SOAP-Command-Execution.html", "http://www.securityfocus.com/bid/74330", "https://www.exploit-db.com/exploits/37169/", "http://jvn.jp/en/jp/JVN47580234/index.html", "http://jvn.jp/en/jp/JVN67456944/index.html", "https://sensorstechforum.com/hinatabot-cve-2014-8361-ddos/", "https://web.archive.org/web/20150909230440/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-8361", "https://web.archive.org/web/20150831100501/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055", "https://nvd.nist.gov/vuln/detail/CVE-2014-8361" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2014/8xxx/CVE-2014-8361.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2014-8361", "http://www.zerodayinitiative.com/advisories/ZDI-15-155/", "http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055", "http://packetstormsecurity.com/files/132090/Realtek-SDK-Miniigd-UPnP-SOAP-Command-Execution.html", "http://www.securityfocus.com/bid/74330", "https://www.exploit-db.com/exploits/37169/", "http://jvn.jp/en/jp/JVN47580234/index.html", "http://jvn.jp/en/jp/JVN67456944/index.html", "https://sensorstechforum.com/hinatabot-cve-2014-8361-ddos/", "https://web.archive.org/web/20150909230440/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-8361", "https://web.archive.org/web/20150831100501/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055", "https://nvd.nist.gov/vuln/detail/CVE-2014-8361" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2014/8xxx/CVE-2014-8361.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-8361", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2014-8361", "label": "CVE公式レコード" }, { "url": "http://www.zerodayinitiative.com/advisories/ZDI-15-155/", "label": "CVE掲載の参考情報" }, { "url": "http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/132090/Realtek-SDK-Miniigd-UPnP-SOAP-Command-Execution.html", "label": "CVE掲載の参考情報" }, { "url": "http://www.securityfocus.com/bid/74330", "label": "74330" }, { "url": "https://www.exploit-db.com/exploits/37169/", "label": "37169" }, { "url": "http://jvn.jp/en/jp/JVN47580234/index.html", "label": "JVN#47580234" }, { "url": "http://jvn.jp/en/jp/JVN67456944/index.html", "label": "JVN#67456944" }, { "url": "https://sensorstechforum.com/hinatabot-cve-2014-8361-ddos/", "label": "CVE掲載の参考情報" }, { "url": "https://web.archive.org/web/20150909230440/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055", "label": "CVE掲載の参考情報" }, { "url": "https://web.archive.org/web/20150831100501/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8361", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2014/8xxx/CVE-2014-8361.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-8361", "sourceField": "retained:/originalText", "excerpt": "Realtek SDK contains an improper input validation vulnerability in the miniigd SOAP service that allows remote attackers to execute malicious code via a crafted NewInternalClient request.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2014/8xxx/CVE-2014-8361.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-8361", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-8361", "sourceField": "/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-8361", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2014-8361\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2014-8361（Realtek SDK）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者はリモートから対象デバイスにアクセスでき、対象が Realtek SDK の miniigd SOAP サービスを実行している必要があります。\n・攻撃者は細工した NewInternalClient リクエストを送信できる必要があります。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2014-8361", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-25T05:33:22.282Z", "lastSuccess": "2026-10-25T05:33:22.282Z", "sourceCheckedAt": "2026-10-25T05:33:22.282Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2017-6884", "aliases": [], "title": "n/a：コード実行", "summary": "Zyxel EMG2926 ホームルーター（ファームウェア V1.00(AAQT.4)b8）に、診断ツールの nslookup 機能にコマンドインジェクション脆弱性が存在します。攻撃者は expert/maintenance/diagnostic/nslookup の URI の ping_ip パラメータなど複数の手段を利用して、ルーター上で任意のコマンドを実行できる可能性があります。", "risk": "攻撃者がルーター上で任意のコマンドを実行できるため、機器の制御やネットワークへの不正アクセスが可能になる恐れがあります。", "product": "Zyxel EMG2926 Routers", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "mitre", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/6xxx/CVE-2017-6884.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6884", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2017-6884", "label": "CVE公式レコード" }, { "url": "https://www.exploit-db.com/exploits/41782/", "label": "41782" }, { "url": "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-vulnerability-in-emg2926-q10a-ethernet-cpe", "label": "CISAが示す関連情報" }, { "url": "https://www.zyxelguard.com/Zyxel-EOL.asp", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-6884", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2017-04-06T17:00:00.000Z", "modifiedAt": "2026-10-01T18:18:55.567Z", "fetchedAt": "2026-10-25T06:35:54.187Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vulnerability is located in the diagnostic tools, specifically the nslookup function. A malicious user may exploit numerous vectors to execute arbitrary commands on the router, such as the ping_ip parameter to the expert/maintenance/diagnostic/nslookup URI.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2017-6884", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/6xxx/CVE-2017-6884.json", "fetchedAt": "2026-10-25T06:35:54.187Z", "publishedAt": "2017-04-06T17:00:00.000Z", "modifiedAt": "2026-10-01T18:18:55.567Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vulnerability is located in the diagnostic tools, specifically the nslookup function. A malicious user may exploit numerous vectors to execute arbitrary commands on the router, such as the ping_ip parameter to the expert/maintenance/diagnostic/nslookup URI.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Zyxel EMG2926 routers contain a command injection vulnerability located in the diagnostic tools, specifically the nslookup function. A malicious user may exploit numerous vectors to execute malicious commands on the router, such as the ping_ip parameter to the expert/maintenance/diagnostic/nslookup URI.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6884", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.exploit-db.com/exploits/41782/", "label": "41782", "tags": [ "exploit", "x_refsource_EXPLOIT-DB", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6884", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/6xxx/CVE-2017-6884.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/6xxx/CVE-2017-6884.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vulnerability is located in the diagnostic tools, specifically the nslookup function. A malicious user may exploit numerous vectors to execute arbitrary commands on the router, such as the ping_ip parameter to the expert/maintenance/diagnostic/nslookup URI.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/6xxx/CVE-2017-6884.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"n/a\",\"lang\":\"en\",\"type\":\"text\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/6xxx/CVE-2017-6884.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2017-6884:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6884", "sourcePath": "retained:/originalText", "text": "Zyxel EMG2926 routers contain a command injection vulnerability located in the diagnostic tools, specifically the nslookup function. A malicious user may exploit numerous vectors to execute malicious commands on the router, such as the ping_ip parameter to the expert/maintenance/diagnostic/nslookup URI.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2017-6884:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6884", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6884", "modifiedAt": "2023-09-18T00:00:00.000Z", "fetchedAt": "2026-10-25T06:17:49.639Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-01T18:18:55.567Z", "fetchedAt": "2026-10-25T06:35:54.187Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-09-18T00:00:00.000Z", "fetchedAt": "2026-10-25T06:17:49.639Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "n/aにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-25T06:35:54.187Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "380e77449d8927267d24cebbb00d1f3b38d09aaa66715ee2dacbcb24f207e005", "sourceModifiedAt": "2026-10-01T18:18:55.567Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Zyxel EMG2926 ホームルーター（ファームウェア V1.00(AAQT.4)b8）に、診断ツールの nslookup 機能にコマンドインジェクション脆弱性が存在します。攻撃者は expert/maintenance/diagnostic/nslookup の URI の ping_ip パラメータなど複数の手段を利用して、ルーター上で任意のコマンドを実行できる可能性があります。", "risk": "攻撃者がルーター上で任意のコマンドを実行できるため、機器の制御やネットワークへの不正アクセスが可能になる恐れがあります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "対象は Zyxel EMG2926 ルーターで、ファームウェアバージョン V1.00(AAQT.4)b8 がインストールされていること。診断ツールの nslookup 機能が有効で、expert/maintenance/diagnostic/nslookup の URI に対して ping_ip パラメータを送信できる状態であることが攻撃の前提条件です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/6xxx/CVE-2017-6884.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6884" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/6xxx/CVE-2017-6884.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6884" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/6xxx/CVE-2017-6884.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Zyxel EMG2926 Routers」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2017-6884", "https://www.exploit-db.com/exploits/41782/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6884", "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-vulnerability-in-emg2926-q10a-ethernet-cpe", "https://www.zyxelguard.com/Zyxel-EOL.asp", "https://nvd.nist.gov/vuln/detail/CVE-2017-6884" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/6xxx/CVE-2017-6884.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6884" ], "evidenceIds": [ "E4", "E5" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/6xxx/CVE-2017-6884.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2017-6884", "https://www.exploit-db.com/exploits/41782/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6884", "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-vulnerability-in-emg2926-q10a-ethernet-cpe", "https://www.zyxelguard.com/Zyxel-EOL.asp", "https://nvd.nist.gov/vuln/detail/CVE-2017-6884" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/6xxx/CVE-2017-6884.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6884", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2017-6884", "label": "CVE公式レコード" }, { "url": "https://www.exploit-db.com/exploits/41782/", "label": "41782" }, { "url": "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-vulnerability-in-emg2926-q10a-ethernet-cpe", "label": "CISAが示す関連情報" }, { "url": "https://www.zyxelguard.com/Zyxel-EOL.asp", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-6884", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/6xxx/CVE-2017-6884.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vulnerability is located in the diagnostic tools, specifically the nslookup function. A malicious user may exploit numerous vectors to execute arbitrary commands on the router, such as the ping_ip parameter to the expert/maintenance/diagnostic/nslookup URI.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6884", "sourceField": "retained:/originalText", "excerpt": "Zyxel EMG2926 routers contain a command injection vulnerability located in the diagnostic tools, specifically the nslookup function. A malicious user may exploit numerous vectors to execute malicious commands on the router, such as the ping_ip parameter to the expert/maintenance/diagnostic/nslookup URI.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/6xxx/CVE-2017-6884.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6884", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6884", "sourceField": "/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6884", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2017-6884\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2017-6884（Zyxel EMG2926 Routers）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象は Zyxel EMG2926 ルーターで、ファームウェアバージョン V1.00(AAQT.4)b8 がインストールされていること。診断ツールの nslookup 機能が有効で、expert/maintenance/diagnostic/nslookup の URI に対して ping_ip パラメータを送信できる状態であることが攻撃の前提条件です。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2017-6884", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-25T06:35:54.187Z", "lastSuccess": "2026-10-25T06:35:54.187Z", "sourceCheckedAt": "2026-10-25T06:35:54.187Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2021-3129", "aliases": [], "title": "n/a：コード実行", "summary": "Laravelや他の製品で使用されているIgnition 2.5.2未満では、file_get_contents() と file_put_contents() の安全でない使用により、認証されていないリモート攻撃者が任意のコードを実行できる脆弱性があります。この脆弱性は、Laravel 8.4.2未満でデバッグモードが有効になっているサイトで悪用可能です。", "risk": "攻撃者はサーバー上で任意のコードを実行できる可能性があります。", "product": "Laravel Ignition", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "mitre", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止する。", "「CVE-2021-3129」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3129.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-3129", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2021-3129", "label": "CVE公式レコード" }, { "url": "https://www.ambionics.io/blog/laravel-debug-rce", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/facade/ignition/pull/334", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/162094/Ignition-2.5.1-Remote-Code-Execution.html", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/165999/Ignition-Remote-Code-Execution.html", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/facade/ignition/releases/tag/2.5.2", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3129", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2021-01-12T14:07:38.000Z", "modifiedAt": "2025-10-21T23:35:30.227Z", "fetchedAt": "2026-10-25T05:33:29.844Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of file_get_contents() and file_put_contents(). This is exploitable on sites using debug mode with Laravel before 8.4.2.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2021-3129", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3129.json", "fetchedAt": "2026-10-25T05:33:29.844Z", "publishedAt": "2021-01-12T14:07:38.000Z", "modifiedAt": "2025-10-21T23:35:30.227Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of file_get_contents() and file_put_contents(). This is exploitable on sites using debug mode with Laravel before 8.4.2.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Laravel Ignition contains a file upload vulnerability that allows unauthenticated remote attackers to execute malicious code due to insecure usage of file_get_contents() and file_put_contents().", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-3129", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.ambionics.io/blog/laravel-debug-rce", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://github.com/facade/ignition/pull/334", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "http://packetstormsecurity.com/files/162094/Ignition-2.5.1-Remote-Code-Execution.html", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "http://packetstormsecurity.com/files/165999/Ignition-Remote-Code-Execution.html", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-3129", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3129.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3129.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of file_get_contents() and file_put_contents(). This is exploitable on sites using debug mode with Laravel before 8.4.2.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3129.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"n/a\",\"lang\":\"en\",\"type\":\"text\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3129.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":9.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2021-3129:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-3129", "sourcePath": "retained:/originalText", "text": "Laravel Ignition contains a file upload vulnerability that allows unauthenticated remote attackers to execute malicious code due to insecure usage of file_get_contents() and file_put_contents().", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2021-3129:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-3129", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-3129", "modifiedAt": "2023-09-18T00:00:00.000Z", "fetchedAt": "2026-10-25T05:17:50.551Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:35:30.227Z", "fetchedAt": "2026-10-25T05:33:29.844Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-09-18T00:00:00.000Z", "fetchedAt": "2026-10-25T05:17:50.551Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "n/aにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-25T05:33:29.844Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "5f14215226e42d4ff1d7b55548ee1d94adcbc9c34c73a77c80478e3ca85d00d3", "sourceModifiedAt": "2025-10-21T23:35:30.227Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Laravelや他の製品で使用されているIgnition 2.5.2未満では、file_get_contents() と file_put_contents() の安全でない使用により、認証されていないリモート攻撃者が任意のコードを実行できる脆弱性があります。この脆弱性は、Laravel 8.4.2未満でデバッグモードが有効になっているサイトで悪用可能です。", "risk": "攻撃者はサーバー上で任意のコードを実行できる可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "対象は Laravel Ignition のバージョン 2.5.2 未満です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3129.json" ], "evidenceIds": [ "E1" ] }, { "text": "Laravel 本体のバージョンが 8.4.2 未満であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3129.json" ], "evidenceIds": [ "E1" ] }, { "text": "Laravel のデバッグモードが有効になっていること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3129.json" ], "evidenceIds": [ "E1" ] }, { "text": "攻撃者は認証されていないリモートのユーザーであること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3129.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3129.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-3129" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3129.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Laravel Ignition」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2021-3129", "https://www.ambionics.io/blog/laravel-debug-rce", "https://github.com/facade/ignition/pull/334", "http://packetstormsecurity.com/files/162094/Ignition-2.5.1-Remote-Code-Execution.html", "http://packetstormsecurity.com/files/165999/Ignition-Remote-Code-Execution.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-3129", "https://github.com/facade/ignition/releases/tag/2.5.2", "https://nvd.nist.gov/vuln/detail/CVE-2021-3129" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止する。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-3129" ], "evidenceIds": [ "E3", "E4" ] }, { "text": "「CVE-2021-3129」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2021-3129", "https://www.ambionics.io/blog/laravel-debug-rce", "https://github.com/facade/ignition/pull/334", "http://packetstormsecurity.com/files/162094/Ignition-2.5.1-Remote-Code-Execution.html", "http://packetstormsecurity.com/files/165999/Ignition-Remote-Code-Execution.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-3129", "https://github.com/facade/ignition/releases/tag/2.5.2", "https://nvd.nist.gov/vuln/detail/CVE-2021-3129" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2021-3129", "https://www.ambionics.io/blog/laravel-debug-rce", "https://github.com/facade/ignition/pull/334", "http://packetstormsecurity.com/files/162094/Ignition-2.5.1-Remote-Code-Execution.html", "http://packetstormsecurity.com/files/165999/Ignition-Remote-Code-Execution.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-3129", "https://github.com/facade/ignition/releases/tag/2.5.2", "https://nvd.nist.gov/vuln/detail/CVE-2021-3129" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2021-3129", "https://www.ambionics.io/blog/laravel-debug-rce", "https://github.com/facade/ignition/pull/334", "http://packetstormsecurity.com/files/162094/Ignition-2.5.1-Remote-Code-Execution.html", "http://packetstormsecurity.com/files/165999/Ignition-Remote-Code-Execution.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-3129", "https://github.com/facade/ignition/releases/tag/2.5.2", "https://nvd.nist.gov/vuln/detail/CVE-2021-3129" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3129.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2021-3129", "https://www.ambionics.io/blog/laravel-debug-rce", "https://github.com/facade/ignition/pull/334", "http://packetstormsecurity.com/files/162094/Ignition-2.5.1-Remote-Code-Execution.html", "http://packetstormsecurity.com/files/165999/Ignition-Remote-Code-Execution.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-3129", "https://github.com/facade/ignition/releases/tag/2.5.2", "https://nvd.nist.gov/vuln/detail/CVE-2021-3129" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3129.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-3129", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2021-3129", "label": "CVE公式レコード" }, { "url": "https://www.ambionics.io/blog/laravel-debug-rce", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/facade/ignition/pull/334", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/162094/Ignition-2.5.1-Remote-Code-Execution.html", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/165999/Ignition-Remote-Code-Execution.html", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/facade/ignition/releases/tag/2.5.2", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3129", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3129.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of file_get_contents() and file_put_contents(). This is exploitable on sites using debug mode with Laravel before 8.4.2.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/3xxx/CVE-2021-3129.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-3129", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-3129", "sourceField": "/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-3129", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2021-3129\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2021-3129（Laravel Ignition）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象は Laravel Ignition のバージョン 2.5.2 未満です。\n・Laravel 本体のバージョンが 8.4.2 未満であること。\n・Laravel のデバッグモードが有効になっていること。\n・攻撃者は認証されていないリモートのユーザーであること。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2021-3129", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-25T05:33:29.844Z", "lastSuccess": "2026-10-25T05:33:29.844Z", "sourceCheckedAt": "2026-10-25T05:33:29.844Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2022-22265", "aliases": [], "title": "Samsung Mobile Devices：脆弱性情報", "summary": "NPUドライバーで例外条件の不適切なチェックや処理が、SMR Jan-2022 Release 1以前に存在し、任意のメモリ書き込みとコード実行を可能にします。", "risk": "悪意のあるメモリ書き込みとコード実行が可能になる恐れがあります。", "product": "Samsung Mobile Devices", "category": "other", "component": "package", "severity": "medium", "cvss": 5, "cvssVersion": "3.1", "cvssSource": "Samsung Mobile", "cvssVector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L", "affected": [ { "product": "Samsung Mobile Devices", "range": ">= O(8.x), P(9.0), Q(10.0), R(11.0), S(12.0) / < SMR Jan-2022 Release 1" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "「CVE-2022-22265」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22265.json", "label": "CVE：Samsung Mobile" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22265", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2022-22265", "label": "CVE公式レコード" }, { "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=1", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22265", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2022-01-07T22:39:11.000Z", "modifiedAt": "2025-10-21T23:15:49.879Z", "fetchedAt": "2026-10-24T08:36:46.964Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "Samsung Mobile Devices", "vendor": "Samsung Mobile", "versions": [ { "lessThan": "SMR Jan-2022 Release 1", "status": "affected", "version": "O(8.x), P(9.0), Q(10.0), R(11.0), S(12.0)", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2022-22265", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22265.json", "fetchedAt": "2026-10-24T08:36:46.964Z", "publishedAt": "2022-01-07T22:39:11.000Z", "modifiedAt": "2025-10-21T23:15:49.879Z", "state": "published", "provider": "Samsung Mobile", "title": "", "descriptions": [ { "lang": "en", "value": "An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Samsung devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22265", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Samsung Mobile", "product": "Samsung Mobile Devices", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "O(8.x), P(9.0), Q(10.0), R(11.0), S(12.0)", "lessThan": "SMR Jan-2022 Release 1", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-703", "lang": "en", "description": "CWE-703: Improper Check or Handling of Exceptional Conditions", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L", "baseScore": 5, "baseSeverity": "MEDIUM", "provider": "Samsung Mobile", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=1", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22265", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22265.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"Samsung Mobile Devices\",\"vendor\":\"Samsung Mobile\",\"versions\":[{\"lessThan\":\"SMR Jan-2022 Release 1\",\"status\":\"affected\",\"version\":\"O(8.x), P(9.0), Q(10.0), R(11.0), S(12.0)\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22265.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22265.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-703\",\"description\":\"CWE-703: Improper Check or Handling of Exceptional Conditions\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22265.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"availabilityImpact\":\"LOW\",\"baseScore\":5,\"baseSeverity\":\"MEDIUM\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"privilegesRequired\":\"LOW\",\"scope\":\"CHANGED\",\"userInteraction\":\"REQUIRED\",\"vectorString\":\"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2022-22265:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22265", "sourcePath": "retained:/originalText", "text": "Samsung devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2022-22265:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22265", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22265", "modifiedAt": "2023-09-18T00:00:00.000Z", "fetchedAt": "2026-10-24T08:17:50.152Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:15:49.879Z", "fetchedAt": "2026-10-24T08:36:46.964Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-09-18T00:00:00.000Z", "fetchedAt": "2026-10-24T08:17:50.152Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Samsung Mobile Devicesに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T08:36:46.964Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "2320f5ac8c264bef0e7db7b7fa12e8f1e6ee224231111a417bbfd9ba5b682153", "sourceModifiedAt": "2025-10-21T23:15:49.879Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "NPUドライバーで例外条件の不適切なチェックや処理が、SMR Jan-2022 Release 1以前に存在し、任意のメモリ書き込みとコード実行を可能にします。", "risk": "悪意のあるメモリ書き込みとコード実行が可能になる恐れがあります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "対象デバイスがNPUドライバーを使用していること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22265.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Samsung Mobile / Samsung Mobile Devices。影響ありとして記載：O(8.x), P(9.0), Q(10.0), R(11.0), S(12.0)以上、SMR Jan-2022 Release 1未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22265.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22265" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22265.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Samsung Mobile Devices」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2022-22265", "https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=1", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22265", "https://nvd.nist.gov/vuln/detail/CVE-2022-22265" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22265" ], "evidenceIds": [ "E4", "E5" ] }, { "text": "「CVE-2022-22265」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2022-22265", "https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=1", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22265", "https://nvd.nist.gov/vuln/detail/CVE-2022-22265" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2022-22265", "https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=1", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22265", "https://nvd.nist.gov/vuln/detail/CVE-2022-22265" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2022-22265", "https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=1", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22265", "https://nvd.nist.gov/vuln/detail/CVE-2022-22265" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22265.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2022-22265", "https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=1", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22265", "https://nvd.nist.gov/vuln/detail/CVE-2022-22265" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22265.json", "label": "CVE：Samsung Mobile" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22265", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2022-22265", "label": "CVE公式レコード" }, { "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=1", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22265", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22265.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22265", "sourceField": "retained:/originalText", "excerpt": "Samsung devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22265.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"Samsung Mobile Devices\",\"vendor\":\"Samsung Mobile\",\"versions\":[{\"lessThan\":\"SMR Jan-2022 Release 1\",\"status\":\"affected\",\"version\":\"O(8.x), P(9.0), Q(10.0), R(11.0), S(12.0)\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22265", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22265", "sourceField": "/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22265", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2022-22265\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2022-22265（Samsung Mobile Devices）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象デバイスがNPUドライバーを使用していること。\n・公式の対象表：Samsung Mobile / Samsung Mobile Devices。影響ありとして記載：O(8.x), P(9.0), Q(10.0), R(11.0), S(12.0)以上、SMR Jan-2022 Release 1未満。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2022-22265", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T08:36:46.964Z", "lastSuccess": "2026-10-24T08:36:46.964Z", "sourceCheckedAt": "2026-10-24T08:36:46.964Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2023-26369", "aliases": [], "title": "Acrobat Reader：コード実行", "summary": "Acrobat Reader のバージョン 23.003.20284 以前、20.005.30516 以前、20.005.30514 以前は、アウト・オブ・バウンズ書き込み脆弱性により、現在のユーザー権限で任意のコードを実行できる可能性があります。攻撃には、被害者が悪意のあるファイルを開くというユーザー操作が必要です。", "risk": "攻撃が成功すると、現在のユーザー権限で任意のコードが実行され、システムが制御される可能性があります。", "product": "Acrobat Reader", "category": "other", "component": "package", "severity": "high", "cvss": 7.8, "cvssVersion": "3.1", "cvssSource": "adobe", "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "affected": [ { "product": "Acrobat Reader", "range": "<= 20.005.30514" }, { "product": "Acrobat Reader", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止する。", "「CVE-2023-26369」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/26xxx/CVE-2023-26369.json", "label": "CVE：adobe" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-26369", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-26369", "label": "CVE公式レコード" }, { "url": "https://helpx.adobe.com/security/products/acrobat/apsb23-34.html", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-26369", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-09-13T08:17:43.954Z", "modifiedAt": "2025-10-21T23:05:37.994Z", "fetchedAt": "2026-10-24T08:36:56.792Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", "sourceTitle": "[Google Project Zero] Adobe Acrobat DC OOBW 0-day actively exploited in the wild", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "affected", "product": "Acrobat Reader", "vendor": "Adobe", "versions": [ { "lessThanOrEqual": "20.005.30514", "status": "affected", "version": "0", "versionType": "semver" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-26369", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/26xxx/CVE-2023-26369.json", "fetchedAt": "2026-10-24T08:36:56.792Z", "publishedAt": "2023-09-13T08:17:43.954Z", "modifiedAt": "2025-10-21T23:05:37.994Z", "state": "published", "provider": "adobe", "title": "[Google Project Zero] Adobe Acrobat DC OOBW 0-day actively exploited in the wild", "descriptions": [ { "lang": "en", "value": "Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Adobe Acrobat and Reader contains an out-of-bounds write vulnerability that allows for code execution.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-26369", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Adobe", "product": "Acrobat Reader", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThanOrEqual": "20.005.30514", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-787", "lang": "en", "description": "Out-of-bounds Write (CWE-787)", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "provider": "adobe", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://helpx.adobe.com/security/products/acrobat/apsb23-34.html", "label": "CVE", "tags": [ "vendor-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-26369", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/26xxx/CVE-2023-26369.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"affected\",\"product\":\"Acrobat Reader\",\"vendor\":\"Adobe\",\"versions\":[{\"lessThanOrEqual\":\"20.005.30514\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/26xxx/CVE-2023-26369.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/26xxx/CVE-2023-26369.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-787\",\"description\":\"Out-of-bounds Write (CWE-787)\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/26xxx/CVE-2023-26369.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"LOCAL\",\"availabilityImpact\":\"HIGH\",\"availabilityRequirement\":\"NOT_DEFINED\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"confidentialityImpact\":\"HIGH\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"environmentalScore\":7.8,\"environmentalSeverity\":\"HIGH\",\"exploitCodeMaturity\":\"NOT_DEFINED\",\"integrityImpact\":\"HIGH\",\"integrityRequirement\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"LOW\",\"modifiedAttackVector\":\"LOCAL\",\"modifiedAvailabilityImpact\":\"HIGH\",\"modifiedConfidentialityImpact\":\"HIGH\",\"modifiedIntegrityImpact\":\"HIGH\",\"modifiedPrivilegesRequired\":\"NONE\",\"modifiedScope\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"REQUIRED\",\"privilegesRequired\":\"NONE\",\"remediationLevel\":\"NOT_DEFINED\",\"reportConfidence\":\"NOT_DEFINED\",\"scope\":\"UNCHANGED\",\"temporalScore\":7.8,\"temporalSeverity\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-26369:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-26369", "sourcePath": "retained:/originalText", "text": "Adobe Acrobat and Reader contains an out-of-bounds write vulnerability that allows for code execution.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-26369:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-26369", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-26369", "modifiedAt": "2023-09-14T00:00:00.000Z", "fetchedAt": "2026-10-24T08:17:50.152Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:37.994Z", "fetchedAt": "2026-10-24T08:36:56.792Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-09-14T00:00:00.000Z", "fetchedAt": "2026-10-24T08:17:50.152Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Acrobat Readerにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T08:36:56.792Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "e3b840cb1c401060f7d00e68cea26a609231b15602a6270ebf6747c23af107c9", "sourceModifiedAt": "2025-10-21T23:05:37.994Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Acrobat Reader のバージョン 23.003.20284 以前、20.005.30516 以前、20.005.30514 以前は、アウト・オブ・バウンズ書き込み脆弱性により、現在のユーザー権限で任意のコードを実行できる可能性があります。攻撃には、被害者が悪意のあるファイルを開くというユーザー操作が必要です。", "risk": "攻撃が成功すると、現在のユーザー権限で任意のコードが実行され、システムが制御される可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Acrobat Reader バージョン 23.003.20284 以前が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/26xxx/CVE-2023-26369.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "Acrobat Reader バージョン 20.005.30516 以前が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/26xxx/CVE-2023-26369.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "Acrobat Reader バージョン 20.005.30514 以前が影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/26xxx/CVE-2023-26369.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "構造化された対象表 (S5) では 20.005.30514 以下のみが記載されており、他のバージョン範囲については記載がなく不確実性が残ります。", "kind": "check", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/26xxx/CVE-2023-26369.json" ], "evidenceIds": [ "E3", "E1", "E2" ] }, { "text": "公式の対象表：Adobe / Acrobat Reader。影響ありとして記載：20.005.30514以下の版。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/26xxx/CVE-2023-26369.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-26369" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/26xxx/CVE-2023-26369.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Acrobat Reader」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-26369", "https://helpx.adobe.com/security/products/acrobat/apsb23-34.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-26369", "https://nvd.nist.gov/vuln/detail/CVE-2023-26369" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止する。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-26369" ], "evidenceIds": [ "E4", "E5" ] }, { "text": "「CVE-2023-26369」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-26369", "https://helpx.adobe.com/security/products/acrobat/apsb23-34.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-26369", "https://nvd.nist.gov/vuln/detail/CVE-2023-26369" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-26369", "https://helpx.adobe.com/security/products/acrobat/apsb23-34.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-26369", "https://nvd.nist.gov/vuln/detail/CVE-2023-26369" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-26369", "https://helpx.adobe.com/security/products/acrobat/apsb23-34.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-26369", "https://nvd.nist.gov/vuln/detail/CVE-2023-26369" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/26xxx/CVE-2023-26369.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-26369", "https://helpx.adobe.com/security/products/acrobat/apsb23-34.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-26369", "https://nvd.nist.gov/vuln/detail/CVE-2023-26369" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/26xxx/CVE-2023-26369.json", "label": "CVE：adobe" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-26369", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-26369", "label": "CVE公式レコード" }, { "url": "https://helpx.adobe.com/security/products/acrobat/apsb23-34.html", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-26369", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/26xxx/CVE-2023-26369.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/26xxx/CVE-2023-26369.json", "sourceField": "/containers/cna/title", "excerpt": "[Google Project Zero] Adobe Acrobat DC OOBW 0-day actively exploited in the wild", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/26xxx/CVE-2023-26369.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"affected\",\"product\":\"Acrobat Reader\",\"vendor\":\"Adobe\",\"versions\":[{\"lessThanOrEqual\":\"20.005.30514\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-26369", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-26369", "sourceField": "/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-26369", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-26369\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-26369（Acrobat Reader）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Acrobat Reader バージョン 23.003.20284 以前が影響を受ける。\n・Acrobat Reader バージョン 20.005.30516 以前が影響を受ける。\n・Acrobat Reader バージョン 20.005.30514 以前が影響を受ける。\n・構造化された対象表 (S5) では 20.005.30514 以下のみが記載されており、他のバージョン範囲については記載がなく不確実性が残ります。\n・公式の対象表：Adobe / Acrobat Reader。影響ありとして記載：20.005.30514以下の版。個別に例外が記されていない版も、原資料では影響ありとされています。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-26369", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T08:36:56.792Z", "lastSuccess": "2026-10-24T08:36:56.792Z", "sourceCheckedAt": "2026-10-24T08:36:56.792Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2023-20269", "aliases": [], "title": "Cisco Adaptive Security Appliance (ASA) Software / Cisco Firepower Threat Defense Software：脆弱性情報", "summary": "Cisco Adaptive Security Appliance (ASA) ソフトウェアおよび Cisco Firepower Threat Defense (FTD) ソフトウェアのリモートアクセス VPN 機能において、認証・認可・課金 (AAA) が HTTPS 管理やサイト間 VPN 機能と適切に分離されていないため、認証されていないリモート攻撃者はブルートフォース攻撃で有効なユーザー名とパスワードの組み合わせを特定でき、認証済みのリモート攻撃者は不正なユーザーでクライアントレス SSL VPN セッションを確立できる可能性があります。", "risk": "攻撃者が有効な認証情報を取得すると、許可されていないリモートアクセス VPN セッションを確立できるようになる可能性があります。", "product": "Cisco Adaptive Security Appliance (ASA) Software / Cisco Firepower Threat Defense Software", "category": "other", "component": "package", "severity": "medium", "cvss": 5, "cvssVersion": "3.1", "cvssSource": "cisco", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N", "affected": [ { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.1.5" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.1.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.8" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.14" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.17" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.20" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.24" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.26" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.28" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.33" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.35" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.38" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.8" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.11" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.14" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.16" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.18" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.21" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.26" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.29" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.8" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.10" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.12" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.17" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.25" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.20" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.22" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.26" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.29" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.32" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.33" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.34" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.35" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.39" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.40" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.41" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.43" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.44" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.45" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.46" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.48" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.1.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.1.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.2.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.2.5" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.2.9" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.3.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.3.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.3.12" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.3.9" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.2.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.10" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.13" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.8" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.18" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.24" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.26" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.29" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.30" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.35" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.37" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.38" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.39" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.40" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.41" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.47" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.48" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.50" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.52" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.54" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.55" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.56" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.58" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.1.10" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.1.6" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.1.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.1.19" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.1.30" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.2.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.2.8" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.2.13" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.2.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.3.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.3.9" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.3.11" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.3.13" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.3.18" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.3.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.6" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.12" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.13" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.14" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.17" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.22" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.23" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1.10" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1.16" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1.17" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1.21" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.1.28" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.2.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.2.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.2.11" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.2.13" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.2.14" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.3.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.3.14" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.3.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.3.19" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.3.23" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.9" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.14" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.18" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.19" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.27" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.38" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.9" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.10" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.11" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.13" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.20" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.30" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.1.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.2.5" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.2.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.2.8" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.3.39" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.3.46" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.3.53" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.3.55" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1.5" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1.9" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1.12" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1.18" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.4" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.5" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.6" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.7" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.8" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.10" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.11" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.9" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.12" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.13" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.14" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.15" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.16" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.17" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.18" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.0.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.4" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.5" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.5.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.5.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.7" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.7.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.4" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.5" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.6" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.7" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.8" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.9" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.10" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.11" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.12" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.13" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.14" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.15" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.16" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.7.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.7.0.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.7.0.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.7.0.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.0.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.1.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.2.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.4" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.5" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.6" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.1.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.1.0.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.1.0.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.1.0.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.0.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.4" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.4.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.5" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.3.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.3.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.3.1.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.4.0" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/20xxx/CVE-2023-20269.json", "label": "CVE：cisco" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-20269", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-20269", "label": "CVE公式レコード" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ravpn-auth-8LyfCkeC", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-20269", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-09-06T17:09:29.663Z", "modifiedAt": "2026-08-06T03:55:39.099Z", "fetchedAt": "2026-10-25T05:33:33.190Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or an authenticated, remote attacker to establish a clientless SSL VPN session with an unauthorized user.\r\n\r This vulnerability is due to improper separation of authentication, authorization, and accounting (AAA) between the remote access VPN feature and the HTTPS management and site-to-site VPN features. An attacker could exploit this vulnerability by specifying a default connection profile/tunnel group while conducting a brute force attack or while establishing a clientless SSL VPN session using valid credentials. A successful exploit could allow the attacker to achieve one or both of the following:\r\n\r \r Identify valid credentials that could then be used to establish an unauthorized remote access VPN session.\r Establish a clientless SSL VPN session (only when running Cisco ASA Software Release 9.16 or earlier).\r \r Notes:\r\n\r \r Establishing a client-based remote access VPN tunnel is not possible as these default connection profiles/tunnel groups do not and cannot have an IP address pool configured.\r This vulnerability does not allow an attacker to bypass authentication. To successfully establish a remote access VPN session, valid credentials are required, including a valid second factor if multi-factor authentication (MFA) is configured.\r \r Cisco will release software updates that address this vulnerability. There are workarounds that address this vulnerability.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Cisco", "product": "Cisco Adaptive Security Appliance (ASA) Software", "versions": [ { "version": "9.8.1", "status": "affected" }, { "version": "9.8.1.5", "status": "affected" }, { "version": "9.8.1.7", "status": "affected" }, { "version": "9.8.2", "status": "affected" }, { "version": "9.8.2.8", "status": "affected" }, { "version": "9.8.2.14", "status": "affected" }, { "version": "9.8.2.15", "status": "affected" }, { "version": "9.8.2.17", "status": "affected" }, { "version": "9.8.2.20", "status": "affected" }, { "version": "9.8.2.24", "status": "affected" }, { "version": "9.8.2.26", "status": "affected" }, { "version": "9.8.2.28", "status": "affected" }, { "version": "9.8.2.33", "status": "affected" }, { "version": "9.8.2.35", "status": "affected" }, { "version": "9.8.2.38", "status": "affected" }, { "version": "9.8.3.8", "status": "affected" }, { "version": "9.8.3.11", "status": "affected" }, { "version": "9.8.3.14", "status": "affected" }, { "version": "9.8.3.16", "status": "affected" }, { "version": "9.8.3.18", "status": "affected" }, { "version": "9.8.3.21", "status": "affected" }, { "version": "9.8.3", "status": "affected" }, { "version": "9.8.3.26", "status": "affected" }, { "version": "9.8.3.29", "status": "affected" }, { "version": "9.8.4", "status": "affected" }, { "version": "9.8.4.3", "status": "affected" }, { "version": "9.8.4.7", "status": "affected" }, { "version": "9.8.4.8", "status": "affected" }, { "version": "9.8.4.10", "status": "affected" }, { "version": "9.8.4.12", "status": "affected" }, { "version": "9.8.4.15", "status": "affected" }, { "version": "9.8.4.17", "status": "affected" }, { "version": "9.8.4.25", "status": "affected" }, { "version": "9.8.4.20", "status": "affected" }, { "version": "9.8.4.22", "status": "affected" }, { "version": "9.8.4.26", "status": "affected" }, { "version": "9.8.4.29", "status": "affected" }, { "version": "9.8.4.32", "status": "affected" }, { "version": "9.8.4.33", "status": "affected" }, { "version": "9.8.4.34", "status": "affected" }, { "version": "9.8.4.35", "status": "affected" }, { "version": "9.8.4.39", "status": "affected" }, { "version": "9.8.4.40", "status": "affected" }, { "version": "9.8.4.41", "status": "affected" }, { "version": "9.8.4.43", "status": "affected" }, { "version": "9.8.4.44", "status": "affected" }, { "version": "9.8.4.45", "status": "affected" }, { "version": "9.8.4.46", "status": "affected" }, { "version": "9.8.4.48", "status": "affected" }, { "version": "9.12.1", "status": "affected" }, { "version": "9.12.1.2", "status": "affected" }, { "version": "9.12.1.3", "status": "affected" }, { "version": "9.12.2", "status": "affected" }, { "version": "9.12.2.4", "status": "affected" }, { "version": "9.12.2.5", "status": "affected" }, { "version": "9.12.2.9", "status": "affected" }, { "version": "9.12.3", "status": "affected" }, { "version": "9.12.3.2", "status": "affected" }, { "version": "9.12.3.7", "status": "affected" }, { "version": "9.12.4", "status": "affected" }, { "version": "9.12.3.12", "status": "affected" }, { "version": "9.12.3.9", "status": "affected" }, { "version": "9.12.2.1", "status": "affected" }, { "version": "9.12.4.2", "status": "affected" }, { "version": "9.12.4.4", "status": "affected" }, { "version": "9.12.4.7", "status": "affected" }, { "version": "9.12.4.10", "status": "affected" }, { "version": "9.12.4.13", "status": "affected" }, { "version": "9.12.4.8", "status": "affected" }, { "version": "9.12.4.18", "status": "affected" }, { "version": "9.12.4.24", "status": "affected" }, { "version": "9.12.4.26", "status": "affected" }, { "version": "9.12.4.29", "status": "affected" }, { "version": "9.12.4.30", "status": "affected" }, { "version": "9.12.4.35", "status": "affected" }, { "version": "9.12.4.37", "status": "affected" }, { "version": "9.12.4.38", "status": "affected" }, { "version": "9.12.4.39", "status": "affected" }, { "version": "9.12.4.40", "status": "affected" }, { "version": "9.12.4.41", "status": "affected" }, { "version": "9.12.4.47", "status": "affected" }, { "version": "9.12.4.48", "status": "affected" }, { "version": "9.12.4.50", "status": "affected" }, { "version": "9.12.4.52", "status": "affected" }, { "version": "9.12.4.54", "status": "affected" }, { "version": "9.12.4.55", "status": "affected" }, { "version": "9.12.4.56", "status": "affected" }, { "version": "9.12.4.58", "status": "affected" }, { "version": "9.14.1", "status": "affected" }, { "version": "9.14.1.10", "status": "affected" }, { "version": "9.14.1.6", "status": "affected" }, { "version": "9.14.1.15", "status": "affected" }, { "version": "9.14.1.19", "status": "affected" }, { "version": "9.14.1.30", "status": "affected" }, { "version": "9.14.2", "status": "affected" }, { "version": "9.14.2.4", "status": "affected" }, { "version": "9.14.2.8", "status": "affected" }, { "version": "9.14.2.13", "status": "affected" }, { "version": "9.14.2.15", "status": "affected" }, { "version": "9.14.3", "status": "affected" }, { "version": "9.14.3.1", "status": "affected" }, { "version": "9.14.3.9", "status": "affected" }, { "version": "9.14.3.11", "status": "affected" }, { "version": "9.14.3.13", "status": "affected" }, { "version": "9.14.3.18", "status": "affected" }, { "version": "9.14.3.15", "status": "affected" }, { "version": "9.14.4", "status": "affected" }, { "version": "9.14.4.6", "status": "affected" }, { "version": "9.14.4.7", "status": "affected" }, { "version": "9.14.4.12", "status": "affected" }, { "version": "9.14.4.13", "status": "affected" }, { "version": "9.14.4.14", "status": "affected" }, { "version": "9.14.4.15", "status": "affected" }, { "version": "9.14.4.17", "status": "affected" }, { "version": "9.14.4.22", "status": "affected" }, { "version": "9.14.4.23", "status": "affected" }, { "version": "9.15.1", "status": "affected" }, { "version": "9.15.1.7", "status": "affected" }, { "version": "9.15.1.10", "status": "affected" }, { "version": "9.15.1.15", "status": "affected" }, { "version": "9.15.1.16", "status": "affected" }, { "version": "9.15.1.17", "status": "affected" }, { "version": "9.15.1.1", "status": "affected" }, { "version": "9.15.1.21", "status": "affected" }, { "version": "9.16.1", "status": "affected" }, { "version": "9.16.1.28", "status": "affected" }, { "version": "9.16.2", "status": "affected" }, { "version": "9.16.2.3", "status": "affected" }, { "version": "9.16.2.7", "status": "affected" }, { "version": "9.16.2.11", "status": "affected" }, { "version": "9.16.2.13", "status": "affected" }, { "version": "9.16.2.14", "status": "affected" }, { "version": "9.16.3", "status": "affected" }, { "version": "9.16.3.3", "status": "affected" }, { "version": "9.16.3.14", "status": "affected" }, { "version": "9.16.3.15", "status": "affected" }, { "version": "9.16.3.19", "status": "affected" }, { "version": "9.16.3.23", "status": "affected" }, { "version": "9.16.4", "status": "affected" }, { "version": "9.16.4.9", "status": "affected" }, { "version": "9.16.4.14", "status": "affected" }, { "version": "9.16.4.18", "status": "affected" }, { "version": "9.16.4.19", "status": "affected" }, { "version": "9.16.4.27", "status": "affected" }, { "version": "9.16.4.38", "status": "affected" }, { "version": "9.17.1", "status": "affected" }, { "version": "9.17.1.7", "status": "affected" }, { "version": "9.17.1.9", "status": "affected" }, { "version": "9.17.1.10", "status": "affected" }, { "version": "9.17.1.11", "status": "affected" }, { "version": "9.17.1.13", "status": "affected" }, { "version": "9.17.1.15", "status": "affected" }, { "version": "9.17.1.20", "status": "affected" }, { "version": "9.17.1.30", "status": "affected" }, { "version": "9.18.1", "status": "affected" }, { "version": "9.18.1.3", "status": "affected" }, { "version": "9.18.2", "status": "affected" }, { "version": "9.18.2.5", "status": "affected" }, { "version": "9.18.2.7", "status": "affected" }, { "version": "9.18.2.8", "status": "affected" }, { "version": "9.18.3", "status": "affected" }, { "version": "9.18.3.39", "status": "affected" }, { "version": "9.18.3.46", "status": "affected" }, { "version": "9.18.3.53", "status": "affected" }, { "version": "9.18.3.55", "status": "affected" }, { "version": "9.19.1", "status": "affected" }, { "version": "9.19.1.5", "status": "affected" }, { "version": "9.19.1.9", "status": "affected" }, { "version": "9.19.1.12", "status": "affected" }, { "version": "9.19.1.18", "status": "affected" } ] }, { "vendor": "Cisco", "product": "Cisco Firepower Threat Defense Software", "versions": [ { "version": "6.2.3", "status": "affected" }, { "version": "6.2.3.1", "status": "affected" }, { "version": "6.2.3.2", "status": "affected" }, { "version": "6.2.3.3", "status": "affected" }, { "version": "6.2.3.4", "status": "affected" }, { "version": "6.2.3.5", "status": "affected" }, { "version": "6.2.3.6", "status": "affected" }, { "version": "6.2.3.7", "status": "affected" }, { "version": "6.2.3.8", "status": "affected" }, { "version": "6.2.3.10", "status": "affected" }, { "version": "6.2.3.11", "status": "affected" }, { "version": "6.2.3.9", "status": "affected" }, { "version": "6.2.3.12", "status": "affected" }, { "version": "6.2.3.13", "status": "affected" }, { "version": "6.2.3.14", "status": "affected" }, { "version": "6.2.3.15", "status": "affected" }, { "version": "6.2.3.16", "status": "affected" }, { "version": "6.2.3.17", "status": "affected" }, { "version": "6.2.3.18", "status": "affected" }, { "version": "6.6.0", "status": "affected" }, { "version": "6.6.0.1", "status": "affected" }, { "version": "6.6.1", "status": "affected" }, { "version": "6.6.3", "status": "affected" }, { "version": "6.6.4", "status": "affected" }, { "version": "6.6.5", "status": "affected" }, { "version": "6.6.5.1", "status": "affected" }, { "version": "6.6.5.2", "status": "affected" }, { "version": "6.6.7", "status": "affected" }, { "version": "6.6.7.1", "status": "affected" }, { "version": "6.4.0", "status": "affected" }, { "version": "6.4.0.1", "status": "affected" }, { "version": "6.4.0.3", "status": "affected" }, { "version": "6.4.0.2", "status": "affected" }, { "version": "6.4.0.4", "status": "affected" }, { "version": "6.4.0.5", "status": "affected" }, { "version": "6.4.0.6", "status": "affected" }, { "version": "6.4.0.7", "status": "affected" }, { "version": "6.4.0.8", "status": "affected" }, { "version": "6.4.0.9", "status": "affected" }, { "version": "6.4.0.10", "status": "affected" }, { "version": "6.4.0.11", "status": "affected" }, { "version": "6.4.0.12", "status": "affected" }, { "version": "6.4.0.13", "status": "affected" }, { "version": "6.4.0.14", "status": "affected" }, { "version": "6.4.0.15", "status": "affected" }, { "version": "6.4.0.16", "status": "affected" }, { "version": "6.7.0", "status": "affected" }, { "version": "6.7.0.1", "status": "affected" }, { "version": "6.7.0.2", "status": "affected" }, { "version": "6.7.0.3", "status": "affected" }, { "version": "7.0.0", "status": "affected" }, { "version": "7.0.0.1", "status": "affected" }, { "version": "7.0.1", "status": "affected" }, { "version": "7.0.1.1", "status": "affected" }, { "version": "7.0.2", "status": "affected" }, { "version": "7.0.2.1", "status": "affected" }, { "version": "7.0.3", "status": "affected" }, { "version": "7.0.4", "status": "affected" }, { "version": "7.0.5", "status": "affected" }, { "version": "7.0.6", "status": "affected" }, { "version": "7.1.0", "status": "affected" }, { "version": "7.1.0.1", "status": "affected" }, { "version": "7.1.0.2", "status": "affected" }, { "version": "7.1.0.3", "status": "affected" }, { "version": "7.2.0", "status": "affected" }, { "version": "7.2.0.1", "status": "affected" }, { "version": "7.2.1", "status": "affected" }, { "version": "7.2.2", "status": "affected" }, { "version": "7.2.3", "status": "affected" }, { "version": "7.2.4", "status": "affected" }, { "version": "7.2.4.1", "status": "affected" }, { "version": "7.2.5", "status": "affected" }, { "version": "7.3.0", "status": "affected" }, { "version": "7.3.1", "status": "affected" }, { "version": "7.3.1.1", "status": "affected" }, { "version": "7.4.0", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-20269", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/20xxx/CVE-2023-20269.json", "fetchedAt": "2026-10-25T05:33:33.190Z", "publishedAt": "2023-09-06T17:09:29.663Z", "modifiedAt": "2026-08-06T03:55:39.099Z", "state": "published", "provider": "cisco", "title": "", "descriptions": [ { "lang": "en", "value": "A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or an authenticated, remote attacker to establish a clientless SSL VPN session with an unauthorized user.\r\n\r This vulnerability is due to improper separation of authentication, authorization, and accounting (AAA) between the remote access VPN feature and the HTTPS management and site-to-site VPN features. An attacker could exploit this vulnerability by specifying a default connection profile/tunnel group while conducting a brute force attack or while establishing a clientless SSL VPN session using valid credentials. A successful exploit could allow the attacker to achieve one or both of the following:\r\n\r \r Identify valid credentials that could then be used to establish an unauthorized remote access VPN session.\r Establish a clientless SSL VPN session (only when running Cisco ASA Software Release 9.16 or earlier).\r \r Notes:\r\n\r \r Establishing a client-based remote access VPN tunnel is not possible as these default connection profiles/tunnel groups do not and cannot have an IP address pool configured.\r This vulnerability does not allow an attacker to bypass authentication. To successfully establish a remote access VPN session, valid credentials are required, including a valid second factor if multi-factor authentication (MFA) is configured.\r \r Cisco will release software updates that address this vulnerability. There are workarounds that address this vulnerability.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Cisco Adaptive Security Appliance and Firepower Threat Defense contain an unauthorized access vulnerability that could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or establish a clientless SSL VPN session with an unauthorized user.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-20269", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Cisco", "product": "Cisco Adaptive Security Appliance (ASA) Software", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "9.8.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "9.8.1.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "9.8.1.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "9.8.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "9.8.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "9.8.2.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "9.8.2.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "9.8.2.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/8", "version": "9.8.2.20", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/9", "version": "9.8.2.24", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/10", "version": "9.8.2.26", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/11", "version": "9.8.2.28", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/12", "version": "9.8.2.33", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/13", "version": "9.8.2.35", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/14", "version": "9.8.2.38", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/15", "version": "9.8.3.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/16", "version": "9.8.3.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/17", "version": "9.8.3.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/18", "version": "9.8.3.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/19", "version": "9.8.3.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/20", "version": "9.8.3.21", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/21", "version": "9.8.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/22", "version": "9.8.3.26", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/23", "version": "9.8.3.29", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/24", "version": "9.8.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/25", "version": "9.8.4.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/26", "version": "9.8.4.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/27", "version": "9.8.4.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/28", "version": "9.8.4.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/29", "version": "9.8.4.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/30", "version": "9.8.4.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/31", "version": "9.8.4.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/32", "version": "9.8.4.25", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/33", "version": "9.8.4.20", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/34", "version": "9.8.4.22", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/35", "version": "9.8.4.26", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/36", "version": "9.8.4.29", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/37", "version": "9.8.4.32", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/38", "version": "9.8.4.33", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/39", "version": "9.8.4.34", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/40", "version": "9.8.4.35", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/41", "version": "9.8.4.39", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/42", "version": "9.8.4.40", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/43", "version": "9.8.4.41", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/44", "version": "9.8.4.43", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/45", "version": "9.8.4.44", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/46", "version": "9.8.4.45", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/47", "version": "9.8.4.46", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/48", "version": "9.8.4.48", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/49", "version": "9.12.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/50", "version": "9.12.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/51", "version": "9.12.1.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/52", "version": "9.12.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/53", "version": "9.12.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/54", "version": "9.12.2.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/55", "version": "9.12.2.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/56", "version": "9.12.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/57", "version": "9.12.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/58", "version": "9.12.3.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/59", "version": "9.12.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/60", "version": "9.12.3.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/61", "version": "9.12.3.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/62", "version": "9.12.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/63", "version": "9.12.4.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/64", "version": "9.12.4.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/65", "version": "9.12.4.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/66", "version": "9.12.4.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/67", "version": "9.12.4.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/68", "version": "9.12.4.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/69", "version": "9.12.4.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/70", "version": "9.12.4.24", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/71", "version": "9.12.4.26", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/72", "version": "9.12.4.29", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/73", "version": "9.12.4.30", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/74", "version": "9.12.4.35", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/75", "version": "9.12.4.37", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/76", "version": "9.12.4.38", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/77", "version": "9.12.4.39", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/78", "version": "9.12.4.40", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/79", "version": "9.12.4.41", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/80", "version": "9.12.4.47", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/81", "version": "9.12.4.48", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/82", "version": "9.12.4.50", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/83", "version": "9.12.4.52", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/84", "version": "9.12.4.54", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/85", "version": "9.12.4.55", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/86", "version": "9.12.4.56", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/87", "version": "9.12.4.58", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/88", "version": "9.14.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/89", "version": "9.14.1.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/90", "version": "9.14.1.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/91", "version": "9.14.1.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/92", "version": "9.14.1.19", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/93", "version": "9.14.1.30", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/94", "version": "9.14.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/95", "version": "9.14.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/96", "version": "9.14.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/97", "version": "9.14.2.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/98", "version": "9.14.2.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/99", "version": "9.14.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/100", "version": "9.14.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/101", "version": "9.14.3.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/102", "version": "9.14.3.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/103", "version": "9.14.3.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/104", "version": "9.14.3.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/105", "version": "9.14.3.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/106", "version": "9.14.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/107", "version": "9.14.4.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/108", "version": "9.14.4.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/109", "version": "9.14.4.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/110", "version": "9.14.4.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/111", "version": "9.14.4.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/112", "version": "9.14.4.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/113", "version": "9.14.4.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/114", "version": "9.14.4.22", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/115", "version": "9.14.4.23", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/116", "version": "9.15.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/117", "version": "9.15.1.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/118", "version": "9.15.1.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/119", "version": "9.15.1.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/120", "version": "9.15.1.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/121", "version": "9.15.1.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/122", "version": "9.15.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/123", "version": "9.15.1.21", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/124", "version": "9.16.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/125", "version": "9.16.1.28", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/126", "version": "9.16.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/127", "version": "9.16.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/128", "version": "9.16.2.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/129", "version": "9.16.2.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/130", "version": "9.16.2.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/131", "version": "9.16.2.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/132", "version": "9.16.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/133", "version": "9.16.3.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/134", "version": "9.16.3.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/135", "version": "9.16.3.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/136", "version": "9.16.3.19", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/137", "version": "9.16.3.23", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/138", "version": "9.16.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/139", "version": "9.16.4.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/140", "version": "9.16.4.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/141", "version": "9.16.4.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/142", "version": "9.16.4.19", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/143", "version": "9.16.4.27", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/144", "version": "9.16.4.38", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/145", "version": "9.17.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/146", "version": "9.17.1.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/147", "version": "9.17.1.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/148", "version": "9.17.1.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/149", "version": "9.17.1.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/150", "version": "9.17.1.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/151", "version": "9.17.1.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/152", "version": "9.17.1.20", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/153", "version": "9.17.1.30", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/154", "version": "9.18.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/155", "version": "9.18.1.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/156", "version": "9.18.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/157", "version": "9.18.2.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/158", "version": "9.18.2.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/159", "version": "9.18.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/160", "version": "9.18.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/161", "version": "9.18.3.39", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/162", "version": "9.18.3.46", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/163", "version": "9.18.3.53", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/164", "version": "9.18.3.55", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/165", "version": "9.19.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/166", "version": "9.19.1.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/167", "version": "9.19.1.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/168", "version": "9.19.1.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/169", "version": "9.19.1.18", "status": "affected" } ] }, { "vendor": "Cisco", "product": "Cisco Firepower Threat Defense Software", "sourcePath": "/containers/cna/affected/1", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "6.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/1", "version": "6.2.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/2", "version": "6.2.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/3", "version": "6.2.3.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/4", "version": "6.2.3.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/5", "version": "6.2.3.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/6", "version": "6.2.3.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/7", "version": "6.2.3.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/8", "version": "6.2.3.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/9", "version": "6.2.3.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/10", "version": "6.2.3.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/11", "version": "6.2.3.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/12", "version": "6.2.3.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/13", "version": "6.2.3.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/14", "version": "6.2.3.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/15", "version": "6.2.3.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/16", "version": "6.2.3.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/17", "version": "6.2.3.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/18", "version": "6.2.3.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/19", "version": "6.6.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/20", "version": "6.6.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/21", "version": "6.6.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/22", "version": "6.6.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/23", "version": "6.6.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/24", "version": "6.6.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/25", "version": "6.6.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/26", "version": "6.6.5.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/27", "version": "6.6.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/28", "version": "6.6.7.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/29", "version": "6.4.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/30", "version": "6.4.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/31", "version": "6.4.0.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/32", "version": "6.4.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/33", "version": "6.4.0.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/34", "version": "6.4.0.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/35", "version": "6.4.0.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/36", "version": "6.4.0.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/37", "version": "6.4.0.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/38", "version": "6.4.0.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/39", "version": "6.4.0.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/40", "version": "6.4.0.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/41", "version": "6.4.0.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/42", "version": "6.4.0.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/43", "version": "6.4.0.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/44", "version": "6.4.0.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/45", "version": "6.4.0.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/46", "version": "6.7.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/47", "version": "6.7.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/48", "version": "6.7.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/49", "version": "6.7.0.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/50", "version": "7.0.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/51", "version": "7.0.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/52", "version": "7.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/53", "version": "7.0.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/54", "version": "7.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/55", "version": "7.0.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/56", "version": "7.0.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/57", "version": "7.0.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/58", "version": "7.0.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/59", "version": "7.0.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/60", "version": "7.1.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/61", "version": "7.1.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/62", "version": "7.1.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/63", "version": "7.1.0.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/64", "version": "7.2.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/65", "version": "7.2.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/66", "version": "7.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/67", "version": "7.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/68", "version": "7.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/69", "version": "7.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/70", "version": "7.2.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/71", "version": "7.2.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/72", "version": "7.3.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/73", "version": "7.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/74", "version": "7.3.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/75", "version": "7.4.0", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [ { "lang": "en", "value": "In August 2023, the Cisco Product Security Incident Response Team (PSIRT) became aware of attempted exploitation of this vulnerability in the wild. Cisco strongly recommends that customers upgrade to a fixed software release to remediate this vulnerability once available and apply one of the suggested workarounds in the meantime.\r\n\r\nFor information on observed attempted exploitation of this vulnerability, see the Cisco blog post on Akira Ransomware Targeting VPNs without Multi-Factor Authentication [\"https://blogs.cisco.com/security/akira-ransomware-targeting-vpns-without-multi-factor-authentication\"]. As explained in this blog post, organizations can significantly reduce the risk of unauthorized access, including a potential ransomware infection, by enabling MFA in VPN implementations.", "sourcePath": "/containers/cna/exploits/0/value" } ], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-288", "lang": "en", "description": "Authentication Bypass Using an Alternate Path or Channel", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N", "baseScore": 5, "baseSeverity": "MEDIUM", "provider": "cisco", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ravpn-auth-8LyfCkeC", "label": "cisco-sa-asaftd-ravpn-auth-8LyfCkeC", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-20269", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/20xxx/CVE-2023-20269.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Adaptive Security Appliance (ASA) Software\",\"versions\":[{\"version\":\"9.8.1\",\"status\":\"affected\"},{\"version\":\"9.8.1.5\",\"status\":\"affected\"},{\"version\":\"9.8.1.7\",\"status\":\"affected\"},{\"version\":\"9.8.2\",\"status\":\"affected\"},{\"version\":\"9.8.2.8\",\"status\":\"affected\"},{\"version\":\"9.8.2.14\",\"status\":\"affected\"},{\"version\":\"9.8.2.15\",\"status\":\"affected\"},{\"version\":\"9.8.2.17\",\"status\":\"affected\"},{\"version\":\"9.8.2.20\",\"status\":\"affected\"},{\"version\":\"9.8.2.24\",\"status\":\"affected\"},{\"version\":\"9.8.2.26\",\"status\":\"affected\"},{\"version\":\"9.8.2.28\",\"status\":\"affected\"},{\"version\":\"9.8.2.33\",\"status\":\"affected\"},{\"version\":\"9.8.2.35\",\"status\":\"affected\"},{\"version\":\"9.8.2.38\",\"status\":\"affected\"},{\"version\":\"9.8.3.8\",\"status\":\"affected\"},{\"version\":\"9.8.3.11\",\"status\":\"affected\"},{\"version\":\"9.8.3.14\",\"status\":\"affected\"},{\"version\":\"9.8.3.16\",\"status\":\"affected\"},{\"version\":\"9.8.3.18\",\"status\":\"affected\"},{\"version\":\"9.8.3.21\",\"status\":\"affected\"},{\"version\":\"9.8.3\",\"status\":\"affected\"},{\"version\":\"9.8.3.26\",\"status\":\"affected\"},{\"version\":\"9.8.3.29\",\"status\":\"affected\"},{\"version\":\"9.8.4\",\"status\":\"affected\"},{\"version\":\"9.8.4.3\",\"status\":\"affected\"},{\"version\":\"9.8.4.7\",\"status\":\"affected\"},{\"version\":\"9.8.4.8\",\"status\":\"affected\"},{\"version\":\"9.8.4.10\",\"status\":\"affected\"},{\"version\":\"9.8.4.12\",\"status\":\"affected\"},{\"version\":\"9.8.4.15\",\"status\":\"affected\"},{\"version\":\"9.8.4.17\",\"status\":\"affected\"},{\"version\":\"9.8.4.25\",\"status\":\"affected\"},{\"version\":\"9.8.4.20\",\"status\":\"affected\"},{\"version\":\"9.8.4.22\",\"status\":\"affected\"},{\"version\":\"9.8.4.26\",\"status\":\"affected\"},{\"version\":\"9.8.4.29\",\"status\":\"affected\"},{\"version\":\"9.8.4.32\",\"status\":\"affected\"},{\"version\":\"9.8.4.33\",\"status\":\"affected\"},{\"version\":\"9.8.4.34\",\"status\":\"affected\"},{\"version\":\"9.8.4.35\",\"status\":\"affected\"},{\"version\":\"9.8.4.39\",\"status\":\"affected\"},{\"version\":\"9.8.4.40\",\"status\":\"affected\"},{\"version\":\"9.8.4.41\",\"status\":\"affected\"},{\"version\":\"9.8.4.43\",\"status\":\"affected\"},{\"version\":\"9.8.4.44\",\"status\":\"affected\"},{\"version\":\"9.8.4.45\",\"status\":\"affected\"},{\"version\":\"9.8.4.46\",\"status\":\"affected\"},{\"version\":\"9.8.4.48\",\"status\":\"affected\"},{\"version\":\"9.12.1\",\"status\":\"affected\"},{\"version\":\"9.12.1.2\",\"status\":\"affected\"},{\"version\":\"9.12.1.3\",\"status\":\"affected\"},{\"version\":\"9.12.2\",\"status\":\"affected\"},{\"version\":\"9.12.2.4\",\"status\":\"affected\"},{\"version\":\"9.12.2.5\",\"status\":\"affected\"},{\"version\":\"9.12.2.9\",\"status\":\"affected\"},{\"version\":\"9.12.3\",\"status\":\"affected\"},{\"version\":\"9.12.3.2\",\"status\":\"affected\"},{\"version\":\"9.12.3.7\",\"status\":\"affected\"},{\"version\":\"9.12.4\",\"status\":\"affected\"},{\"version\":\"9.12.3.12\",\"status\":\"affected\"},{\"version\":\"9.12.3.9\",\"status\":\"affected\"},{\"version\":\"9.12.2.1\",\"status\":\"affected\"},{\"version\":\"9.12.4.2\",\"status\":\"affected\"},{\"version\":\"9.12.4.4\",\"status\":\"affected\"},{\"version\":\"9.12.4.7\",\"status\":\"affected\"},{\"version\":\"9.12.4.10\",\"status\":\"affected\"},{\"version\":\"9.12.4.13\",\"status\":\"affected\"},{\"version\":\"9.12.4.8\",\"status\":\"affected\"},{\"version\":\"9.12.4.18\",\"status\":\"affected\"},{\"version\":\"9.12.4.24\",\"status\":\"affected\"},{\"version\":\"9.12.4.26\",\"status\":\"affected\"},{\"version\":\"9.12.4.29\",\"status\":\"affected\"},{\"version\":\"9.12.4.30\",\"status\":\"affected\"},{\"version\":\"9.12.4.35\",\"status\":\"affected\"},{\"version\":\"9.12.4.37\",\"status\":\"affected\"},{\"version\":\"9.12.4.38\",\"status\":\"affected\"},{\"version\":\"9.12.4.39\",\"status\":\"affected\"},{\"version\":\"9.12.4.40\",\"status\":\"affected\"},{\"version\":\"9.12.4.41\",\"status\":\"affected\"},{\"version\":\"9.12.4.47\",\"status\":\"affected\"},{\"version\":\"9.12.4.48\",\"status\":\"affected\"},{\"version\":\"9.12.4.50\",\"status\":\"affected\"},{\"version\":\"9.12.4.52\",\"status\":\"affected\"},{\"version\":\"9.12.4.54\",\"status\":\"affected\"},{\"version\":\"9.12.4.55\",\"status\":\"affected\"},{\"version\":\"9.12.4.56\",\"status\":\"affected\"},{\"version\":\"9.12.4.58\",\"status\":\"affected\"},{\"version\":\"9.14.1\",\"status\":\"affected\"},{\"version\":\"9.14.1.10\",\"status\":\"affected\"},{\"version\":\"9.14.1.6\",\"status\":\"affected\"},{\"version\":\"9.14.1.15\",\"status\":\"affected\"},{\"version\":\"9.14.1.19\",\"status\":\"affected\"},{\"version\":\"9.14.1.30\",\"status\":\"affected\"},{\"version\":\"9.14.2\",\"status\":\"affected\"},{\"version\":\"9.14.2.4\",\"status\":\"affected\"},{\"version\":\"9.14.2.8\",\"status\":\"affected\"},{\"version\":\"9.14.2.13\",\"status\":\"affected\"},{\"version\":\"9.14.2.15\",\"status\":\"affected\"},{\"version\":\"9.14.3\",\"status\":\"affected\"},{\"version\":\"9.14.3.1\",\"status\":\"affected\"},{\"version\":\"9.14.3.9\",\"status\":\"affected\"},{\"version\":\"9.14.3.11\",\"status\":\"affected\"},{\"version\":\"9.14.3.13\",\"status\":\"affected\"},{\"version\":\"9.14.3.18\",\"status\":\"affected\"},{\"version\":\"9.14.3.15\",\"status\":\"affected\"},{\"version\":\"9.14.4\",\"status\":\"affected\"},{\"version\":\"9.14.4.6\",\"status\":\"affected\"},{\"version\":\"9.14.4.7\",\"status\":\"affected\"},{\"version\":\"9.14.4.12\",\"status\":\"affected\"},{\"version\":\"9.14.4.13\",\"status\":\"affected\"},{\"version\":\"9.14.4.14\",\"status\":\"affected\"},{\"version\":\"9.14.4.15\",\"status\":\"affected\"},{\"version\":\"9.14.4.17\",\"status\":\"affected\"},{\"version\":\"9.14.4.22\",\"status\":\"affected\"},{\"version\":\"9.14.4.23\",\"status\":\"affected\"},{\"version\":\"9.15.1\",\"status\":\"affected\"},{\"version\":\"9.15.1.7\",\"status\":\"affected\"},{\"version\":\"9.15.1.10\",\"status\":\"affected\"},{\"version\":\"9.15.1.15\",\"status\":\"affected\"},{\"version\":\"9.15.1.16\",\"status\":\"affected\"},{\"version\":\"9.15.1.17\",\"status\":\"affected\"},{\"version\":\"9.15.1.1\",\"status\":\"affected\"},{\"version\":\"9.15.1.21\",\"status\":\"affected\"},{\"version\":\"9.16.1\",\"status\":\"affected\"},{\"version\":\"9.16.1.28\",\"status\":\"affected\"},{\"version\":\"9.16.2\",\"status\":\"affected\"},{\"version\":\"9.16.2.3\",\"status\":\"affected\"},{\"version\":\"9.16.2.7\",\"status\":\"affected\"},{\"version\":\"9.16.2.11\",\"status\":\"affected\"},{\"version\":\"9.16.2.13\",\"status\":\"affected\"},{\"version\":\"9.16.2.14\",\"status\":\"affected\"},{\"version\":\"9.16.3\",\"status\":\"affected\"},{\"version\":\"9.16.3.3\",\"status\":\"affected\"},{\"version\":\"9.16.3.14\",\"status\":\"affected\"},{\"version\":\"9.16.3.15\",\"status\":\"affected\"},{\"version\":\"9.16.3.19\",\"status\":\"affected\"},{\"version\":\"9.16.3.23\",\"status\":\"affected\"},{\"version\":\"9.16.4\",\"status\":\"affected\"},{\"version\":\"9.16.4.9\",\"status\":\"affected\"},{\"version\":\"9.16.4.14\",\"status\":\"affected\"},{\"version\":\"9.16.4.18\",\"status\":\"affected\"},{\"version\":\"9.16.4.19\",\"status\":\"affected\"},{\"version\":\"9.16.4.27\",\"status\":\"affected\"},{\"version\":\"9.16.4.38\",\"status\":\"affected\"},{\"version\":\"9.17.1\",\"status\":\"affected\"},{\"version\":\"9.17.1.7\",\"status\":\"affected\"},{\"version\":\"9.17.1.9\",\"status\":\"affected\"},{\"version\":\"9.17.1.10\",\"status\":\"affected\"},{\"version\":\"9.17.1.11\",\"status\":\"affected\"},{\"version\":\"9.17.1.13\",\"status\":\"affected\"},{\"version\":\"9.17.1.15\",\"status\":\"affected\"},{\"version\":\"9.17.1.20\",\"status\":\"affected\"},{\"version\":\"9.17.1.30\",\"status\":\"affected\"},{\"version\":\"9.18.1\",\"status\":\"affected\"},{\"version\":\"9.18.1.3\",\"status\":\"affected\"},{\"version\":\"9.18.2\",\"status\":\"affected\"},{\"version\":\"9.18.2.5\",\"status\":\"affected\"},{\"version\":\"9.18.2.7\",\"status\":\"affected\"},{\"version\":\"9.18.2.8\",\"status\":\"affected\"},{\"version\":\"9.18.3\",\"status\":\"affected\"},{\"version\":\"9.18.3.39\",\"status\":\"affected\"},{\"version\":\"9.18.3.46\",\"status\":\"affected\"},{\"version\":\"9.18.3.53\",\"status\":\"affected\"},{\"version\":\"9.18.3.55\",\"status\":\"affected\"},{\"version\":\"9.19.1\",\"status\":\"affected\"},{\"version\":\"9.19.1.5\",\"status\":\"affected\"},{\"version\":\"9.19.1.9\",\"status\":\"affected\"},{\"version\":\"9.19.1.12\",\"status\":\"affected\"},{\"version\":\"9.19.1.18\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/20xxx/CVE-2023-20269.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Firepower Threat Defense Software\",\"versions\":[{\"version\":\"6.2.3\",\"status\":\"affected\"},{\"version\":\"6.2.3.1\",\"status\":\"affected\"},{\"version\":\"6.2.3.2\",\"status\":\"affected\"},{\"version\":\"6.2.3.3\",\"status\":\"affected\"},{\"version\":\"6.2.3.4\",\"status\":\"affected\"},{\"version\":\"6.2.3.5\",\"status\":\"affected\"},{\"version\":\"6.2.3.6\",\"status\":\"affected\"},{\"version\":\"6.2.3.7\",\"status\":\"affected\"},{\"version\":\"6.2.3.8\",\"status\":\"affected\"},{\"version\":\"6.2.3.10\",\"status\":\"affected\"},{\"version\":\"6.2.3.11\",\"status\":\"affected\"},{\"version\":\"6.2.3.9\",\"status\":\"affected\"},{\"version\":\"6.2.3.12\",\"status\":\"affected\"},{\"version\":\"6.2.3.13\",\"status\":\"affected\"},{\"version\":\"6.2.3.14\",\"status\":\"affected\"},{\"version\":\"6.2.3.15\",\"status\":\"affected\"},{\"version\":\"6.2.3.16\",\"status\":\"affected\"},{\"version\":\"6.2.3.17\",\"status\":\"affected\"},{\"version\":\"6.2.3.18\",\"status\":\"affected\"},{\"version\":\"6.6.0\",\"status\":\"affected\"},{\"version\":\"6.6.0.1\",\"status\":\"affected\"},{\"version\":\"6.6.1\",\"status\":\"affected\"},{\"version\":\"6.6.3\",\"status\":\"affected\"},{\"version\":\"6.6.4\",\"status\":\"affected\"},{\"version\":\"6.6.5\",\"status\":\"affected\"},{\"version\":\"6.6.5.1\",\"status\":\"affected\"},{\"version\":\"6.6.5.2\",\"status\":\"affected\"},{\"version\":\"6.6.7\",\"status\":\"affected\"},{\"version\":\"6.6.7.1\",\"status\":\"affected\"},{\"version\":\"6.4.0\",\"status\":\"affected\"},{\"version\":\"6.4.0.1\",\"status\":\"affected\"},{\"version\":\"6.4.0.3\",\"status\":\"affected\"},{\"version\":\"6.4.0.2\",\"status\":\"affected\"},{\"version\":\"6.4.0.4\",\"status\":\"affected\"},{\"version\":\"6.4.0.5\",\"status\":\"affected\"},{\"version\":\"6.4.0.6\",\"status\":\"affected\"},{\"version\":\"6.4.0.7\",\"status\":\"affected\"},{\"version\":\"6.4.0.8\",\"status\":\"affected\"},{\"version\":\"6.4.0.9\",\"status\":\"affected\"},{\"version\":\"6.4.0.10\",\"status\":\"affected\"},{\"version\":\"6.4.0.11\",\"status\":\"affected\"},{\"version\":\"6.4.0.12\",\"status\":\"affected\"},{\"version\":\"6.4.0.13\",\"status\":\"affected\"},{\"version\":\"6.4.0.14\",\"status\":\"affected\"},{\"version\":\"6.4.0.15\",\"status\":\"affected\"},{\"version\":\"6.4.0.16\",\"status\":\"affected\"},{\"version\":\"6.7.0\",\"status\":\"affected\"},{\"version\":\"6.7.0.1\",\"status\":\"affected\"},{\"version\":\"6.7.0.2\",\"status\":\"affected\"},{\"version\":\"6.7.0.3\",\"status\":\"affected\"},{\"version\":\"7.0.0\",\"status\":\"affected\"},{\"version\":\"7.0.0.1\",\"status\":\"affected\"},{\"version\":\"7.0.1\",\"status\":\"affected\"},{\"version\":\"7.0.1.1\",\"status\":\"affected\"},{\"version\":\"7.0.2\",\"status\":\"affected\"},{\"version\":\"7.0.2.1\",\"status\":\"affected\"},{\"version\":\"7.0.3\",\"status\":\"affected\"},{\"version\":\"7.0.4\",\"status\":\"affected\"},{\"version\":\"7.0.5\",\"status\":\"affected\"},{\"version\":\"7.0.6\",\"status\":\"affected\"},{\"version\":\"7.1.0\",\"status\":\"affected\"},{\"version\":\"7.1.0.1\",\"status\":\"affected\"},{\"version\":\"7.1.0.2\",\"status\":\"affected\"},{\"version\":\"7.1.0.3\",\"status\":\"affected\"},{\"version\":\"7.2.0\",\"status\":\"affected\"},{\"version\":\"7.2.0.1\",\"status\":\"affected\"},{\"version\":\"7.2.1\",\"status\":\"affected\"},{\"version\":\"7.2.2\",\"status\":\"affected\"},{\"version\":\"7.2.3\",\"status\":\"affected\"},{\"version\":\"7.2.4\",\"status\":\"affected\"},{\"version\":\"7.2.4.1\",\"status\":\"affected\"},{\"version\":\"7.2.5\",\"status\":\"affected\"},{\"version\":\"7.3.0\",\"status\":\"affected\"},{\"version\":\"7.3.1\",\"status\":\"affected\"},{\"version\":\"7.3.1.1\",\"status\":\"affected\"},{\"version\":\"7.4.0\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/20xxx/CVE-2023-20269.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or an authenticated, remote attacker to establish a clientless SSL VPN session with an unauthorized user.\r\n\r This vulnerability is due to improper separation of authentication, authorization, and accounting (AAA) between the remote access VPN feature and the HTTPS management and site-to-site VPN features. An attacker could exploit this vulnerability by specifying a default connection profile/tunnel group while conducting a brute force attack or while establishing a clientless SSL VPN session using valid credentials. A successful exploit could allow the attacker to achieve one or both of the following:\r\n\r \r Identify valid credentials that could then be used to establish an unauthorized remote access VPN session.\r Establish a clientless SSL VPN session (only when running Cisco ASA Software Release 9.16 or earlier).\r \r Notes:\r\n\r \r Establishing a client-based remote access VPN tunnel is not possible as these default connection profiles/tunnel groups do not and cannot have an IP address pool configured.\r This vulnerability does not allow an attacker to bypass authentication. To successfully establish a remote access VPN session, valid credentials are required, including a valid second factor if multi-factor authentication (MFA) is configured.\r \r Cisco will release software updates that address this vulnerability. There are workarounds that address this vulnerability.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/exploits/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/20xxx/CVE-2023-20269.json", "sourcePath": "/containers/cna/exploits/0/value", "text": "In August 2023, the Cisco Product Security Incident Response Team (PSIRT) became aware of attempted exploitation of this vulnerability in the wild. Cisco strongly recommends that customers upgrade to a fixed software release to remediate this vulnerability once available and apply one of the suggested workarounds in the meantime.\r\n\r\nFor information on observed attempted exploitation of this vulnerability, see the Cisco blog post on Akira Ransomware Targeting VPNs without Multi-Factor Authentication [\"https://blogs.cisco.com/security/akira-ransomware-targeting-vpns-without-multi-factor-authentication\"]. As explained in this blog post, organizations can significantly reduce the risk of unauthorized access, including a potential ransomware infection, by enabling MFA in VPN implementations.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/20xxx/CVE-2023-20269.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Authentication Bypass Using an Alternate Path or Channel\",\"type\":\"cwe\",\"cweId\":\"CWE-288\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/20xxx/CVE-2023-20269.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N\",\"baseScore\":5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-20269:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-20269", "sourcePath": "retained:/originalText", "text": "Cisco Adaptive Security Appliance and Firepower Threat Defense contain an unauthorized access vulnerability that could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or establish a clientless SSL VPN session with an unauthorized user.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-20269:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-20269", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions for group-lock and vpn-simultaneous-logins or discontinue use of the product for unsupported devices.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-20269", "modifiedAt": "2023-09-13T00:00:00.000Z", "fetchedAt": "2026-10-25T05:17:50.551Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-06T03:55:39.099Z", "fetchedAt": "2026-10-25T05:33:33.190Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-09-13T00:00:00.000Z", "fetchedAt": "2026-10-25T05:17:50.551Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions for group-lock and vpn-simultaneous-logins or discontinue use of the product for unsupported devices.", "sourceSummary": "Cisco Adaptive Security Appliance (ASA) Software / Cisco Firepower Threat Defense Softwareに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-25T05:33:33.190Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "c4a34191f57ba2aa89971dea0b53b562c802272fdf9fbf4ddedc4ca89ea362c6", "sourceModifiedAt": "2026-08-06T03:55:39.099Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Cisco Adaptive Security Appliance (ASA) ソフトウェアおよび Cisco Firepower Threat Defense (FTD) ソフトウェアのリモートアクセス VPN 機能において、認証・認可・課金 (AAA) が HTTPS 管理やサイト間 VPN 機能と適切に分離されていないため、認証されていないリモート攻撃者はブルートフォース攻撃で有効なユーザー名とパスワードの組み合わせを特定でき、認証済みのリモート攻撃者は不正なユーザーでクライアントレス SSL VPN セッションを確立できる可能性があります。", "risk": "攻撃者が有効な認証情報を取得すると、許可されていないリモートアクセス VPN セッションを確立できるようになる可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "攻撃者はリモートからアクセスし、認証されていない状態でブルートフォース攻撃を実行できること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/20xxx/CVE-2023-20269.json" ], "evidenceIds": [ "E1" ] }, { "text": "攻撃者は認証済みで、かつ有効な認証情報（MFA が設定されている場合は第二要素も含む）を使用してクライアントレス SSL VPN セッションを確立できること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/20xxx/CVE-2023-20269.json" ], "evidenceIds": [ "E1" ] }, { "text": "攻撃にはデフォルト接続プロファイル／トンネルグループを指定する必要があること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/20xxx/CVE-2023-20269.json" ], "evidenceIds": [ "E1" ] }, { "text": "クライアントレス SSL VPN セッションの確立は、Cisco ASA ソフトウェアリリース 9.16 以前でのみ可能であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/20xxx/CVE-2023-20269.json" ], "evidenceIds": [ "E1" ] }, { "text": "対象製品は Cisco Adaptive Security Appliance (ASA) ソフトウェアおよび Cisco Firepower Threat Defense (FTD) ソフトウェアであること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/20xxx/CVE-2023-20269.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Cisco / Cisco Adaptive Security Appliance (ASA) Software。影響ありとして記載：9.8.1。影響ありとして記載：9.8.1.5。影響ありとして記載：9.8.1.7。影響ありとして記載：9.8.2。影響ありとして記載：9.8.2.8。影響ありとして記載：9.8.2.14。影響ありとして記載：9.8.2.15。影響ありとして記載：9.8.2.17。影響ありとして記載：9.8.2.20。影響ありとして記載：9.8.2.24。影響ありとして記載：9.8.2.26。影響ありとして記載：9.8.2.28。影響ありとして記載：9.8.2.33。影響ありとして記載：9.8.2.35。影響ありとして記載：9.8.2.38。影響ありとして記載：9.8.3.8。影響ありとして記載：9.8.3.11。影響ありとして記載：9.8.3.14。影響ありとして記載：9.8.3.16。影響ありとして記載：9.8.3.18。影響ありとして記載：9.8.3.21。影響ありとして記載：9.8.3。影響ありとして記載：9.8.3.26。影響ありとして記載：9.8.3.29。影響ありとして記載：9.8.4。影響ありとして記載：9.8.4.3。影響ありとして記載：9.8.4.7。影響ありとして記載：9.8.4.8。影響ありとして記載：9.8.4.10。影響ありとして記載：9.8.4.12。影響ありとして記載：9.8.4.15。影響ありとして記載：9.8.4.17。影響ありとして記載：9.8.4.25。影響ありとして記載：9.8.4.20。影響ありとして記載：9.8.4.22。影響ありとして記載：9.8.4.26。影響ありとして記載：9.8.4.29。影響ありとして記載：9.8.4.32。影響ありとして記載：9.8.4.33。影響ありとして記載：9.8.4.34。影響ありとして記載：9.8.4.35。影響ありとして記載：9.8.4.39。影響ありとして記載：9.8.4.40。影響ありとして記載：9.8.4.41。影響ありとして記載：9.8.4.43。影響ありとして記載：9.8.4.44。影響ありとして記載：9.8.4.45。影響ありとして記載：9.8.4.46。影響ありとして記載：9.8.4.48。影響ありとして記載：9.12.1。影響ありとして記載：9.12.1.2。影響ありとして記載：9.12.1.3。影響ありとして記載：9.12.2。影響ありとして記載：9.12.2.4。影響ありとして記載：9.12.2.5。影響ありとして記載：9.12.2.9。影響ありとして記載：9.12.3。影響ありとして記載：9.12.3.2。影響ありとして記載：9.12.3.7。影響ありとして記載：9.12.4。影響ありとして記載：9.12.3.12。影響ありとして記載：9.12.3.9。影響ありとして記載：9.12.2.1。影響ありとして記載：9.12.4.2。影響ありとして記載：9.12.4.4。影響ありとして記載：9.12.4.7。影響ありとして記載：9.12.4.10。影響ありとして記載：9.12.4.13。影響ありとして記載：9.12.4.8。影響ありとして記載：9.12.4.18。影響ありとして記載：9.12.4.24。影響ありとして記載：9.12.4.26。影響ありとして記載：9.12.4.29。影響ありとして記載：9.12.4.30。影響ありとして記載：9.12.4.35。影響ありとして記載：9.12.4.37。影響ありとして記載：9.12.4.38。影響ありとして記載：9.12.4.39。影響ありとして記載：9.12.4.40。影響ありとして記載：9.12.4.41。影響ありとして記載：9.12.4.47。影響ありとして記載：9.12.4.48。影響ありとして記載：9.12.4.50。影響ありとして記載：9.12.4.52。影響ありとして記載：9.12.4.54。影響ありとして記載：9.12.4.55。影響ありとして記載：9.12.4.56。影響ありとして記載：9.12.4.58。影響ありとして記載：9.14.1。影響ありとして記載：9.14.1.10。影響ありとして記載：9.14.1.6。影響ありとして記載：9.14.1.15。影響ありとして記載：9.14.1.19。影響ありとして記載：9.14.1.30。影響ありとして記載：9.14.2。影響ありとして記載：9.14.2.4。影響ありとして記載：9.14.2.8。影響ありとして記載：9.14.2.13。影響ありとして記載：9.14.2.15。影響ありとして記載：9.14.3。影響ありとして記載：9.14.3.1。影響ありとして記載：9.14.3.9。影響ありとして記載：9.14.3.11。影響ありとして記載：9.14.3.13。影響ありとして記載：9.14.3.18。影響ありとして記載：9.14.3.15。影響ありとして記載：9.14.4。影響ありとして記載：9.14.4.6。影響ありとして記載：9.14.4.7。影響ありとして記載：9.14.4.12。影響ありとして記載：9.14.4.13。影響ありとして記載：9.14.4.14。影響ありとして記載：9.14.4.15。影響ありとして記載：9.14.4.17。影響ありとして記載：9.14.4.22。影響ありとして記載：9.14.4.23。影響ありとして記載：9.15.1。影響ありとして記載：9.15.1.7。影響ありとして記載：9.15.1.10。影響ありとして記載：9.15.1.15。影響ありとして記載：9.15.1.16。影響ありとして記載：9.15.1.17。影響ありとして記載：9.15.1.1。影響ありとして記載：9.15.1.21。影響ありとして記載：9.16.1。影響ありとして記載：9.16.1.28。影響ありとして記載：9.16.2。影響ありとして記載：9.16.2.3。影響ありとして記載：9.16.2.7。影響ありとして記載：9.16.2.11。影響ありとして記載：9.16.2.13。影響ありとして記載：9.16.2.14。影響ありとして記載：9.16.3。影響ありとして記載：9.16.3.3。影響ありとして記載：9.16.3.14。影響ありとして記載：9.16.3.15。影響ありとして記載：9.16.3.19。影響ありとして記載：9.16.3.23。影響ありとして記載：9.16.4。影響ありとして記載：9.16.4.9。影響ありとして記載：9.16.4.14。影響ありとして記載：9.16.4.18。影響ありとして記載：9.16.4.19。影響ありとして記載：9.16.4.27。影響ありとして記載：9.16.4.38。影響ありとして記載：9.17.1。影響ありとして記載：9.17.1.7。影響ありとして記載：9.17.1.9。影響ありとして記載：9.17.1.10。影響ありとして記載：9.17.1.11。影響ありとして記載：9.17.1.13。影響ありとして記載：9.17.1.15。影響ありとして記載：9.17.1.20。影響ありとして記載：9.17.1.30。影響ありとして記載：9.18.1。影響ありとして記載：9.18.1.3。影響ありとして記載：9.18.2。影響ありとして記載：9.18.2.5。影響ありとして記載：9.18.2.7。影響ありとして記載：9.18.2.8。影響ありとして記載：9.18.3。影響ありとして記載：9.18.3.39。影響ありとして記載：9.18.3.46。影響ありとして記載：9.18.3.53。影響ありとして記載：9.18.3.55。影響ありとして記載：9.19.1。影響ありとして記載：9.19.1.5。影響ありとして記載：9.19.1.9。影響ありとして記載：9.19.1.12。影響ありとして記載：9.19.1.18。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/20xxx/CVE-2023-20269.json" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：Cisco / Cisco Firepower Threat Defense Software。影響ありとして記載：6.2.3。影響ありとして記載：6.2.3.1。影響ありとして記載：6.2.3.2。影響ありとして記載：6.2.3.3。影響ありとして記載：6.2.3.4。影響ありとして記載：6.2.3.5。影響ありとして記載：6.2.3.6。影響ありとして記載：6.2.3.7。影響ありとして記載：6.2.3.8。影響ありとして記載：6.2.3.10。影響ありとして記載：6.2.3.11。影響ありとして記載：6.2.3.9。影響ありとして記載：6.2.3.12。影響ありとして記載：6.2.3.13。影響ありとして記載：6.2.3.14。影響ありとして記載：6.2.3.15。影響ありとして記載：6.2.3.16。影響ありとして記載：6.2.3.17。影響ありとして記載：6.2.3.18。影響ありとして記載：6.6.0。影響ありとして記載：6.6.0.1。影響ありとして記載：6.6.1。影響ありとして記載：6.6.3。影響ありとして記載：6.6.4。影響ありとして記載：6.6.5。影響ありとして記載：6.6.5.1。影響ありとして記載：6.6.5.2。影響ありとして記載：6.6.7。影響ありとして記載：6.6.7.1。影響ありとして記載：6.4.0。影響ありとして記載：6.4.0.1。影響ありとして記載：6.4.0.3。影響ありとして記載：6.4.0.2。影響ありとして記載：6.4.0.4。影響ありとして記載：6.4.0.5。影響ありとして記載：6.4.0.6。影響ありとして記載：6.4.0.7。影響ありとして記載：6.4.0.8。影響ありとして記載：6.4.0.9。影響ありとして記載：6.4.0.10。影響ありとして記載：6.4.0.11。影響ありとして記載：6.4.0.12。影響ありとして記載：6.4.0.13。影響ありとして記載：6.4.0.14。影響ありとして記載：6.4.0.15。影響ありとして記載：6.4.0.16。影響ありとして記載：6.7.0。影響ありとして記載：6.7.0.1。影響ありとして記載：6.7.0.2。影響ありとして記載：6.7.0.3。影響ありとして記載：7.0.0。影響ありとして記載：7.0.0.1。影響ありとして記載：7.0.1。影響ありとして記載：7.0.1.1。影響ありとして記載：7.0.2。影響ありとして記載：7.0.2.1。影響ありとして記載：7.0.3。影響ありとして記載：7.0.4。影響ありとして記載：7.0.5。影響ありとして記載：7.0.6。影響ありとして記載：7.1.0。影響ありとして記載：7.1.0.1。影響ありとして記載：7.1.0.2。影響ありとして記載：7.1.0.3。影響ありとして記載：7.2.0。影響ありとして記載：7.2.0.1。影響ありとして記載：7.2.1。影響ありとして記載：7.2.2。影響ありとして記載：7.2.3。影響ありとして記載：7.2.4。影響ありとして記載：7.2.4.1。影響ありとして記載：7.2.5。影響ありとして記載：7.3.0。影響ありとして記載：7.3.1。影響ありとして記載：7.3.1.1。影響ありとして記載：7.4.0。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/20xxx/CVE-2023-20269.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-20269" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/20xxx/CVE-2023-20269.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Cisco Adaptive Security Appliance (ASA) Software / Cisco Firepower Threat Defense Software」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-20269", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ravpn-auth-8LyfCkeC", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-20269", "https://nvd.nist.gov/vuln/detail/CVE-2023-20269" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/20xxx/CVE-2023-20269.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-20269", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ravpn-auth-8LyfCkeC", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-20269", "https://nvd.nist.gov/vuln/detail/CVE-2023-20269" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/20xxx/CVE-2023-20269.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-20269", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ravpn-auth-8LyfCkeC", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-20269", "https://nvd.nist.gov/vuln/detail/CVE-2023-20269" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/20xxx/CVE-2023-20269.json", "label": "CVE：cisco" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-20269", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-20269", "label": "CVE公式レコード" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ravpn-auth-8LyfCkeC", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-20269", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/20xxx/CVE-2023-20269.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or an authenticated, remote attacker to establish a clientless SSL VPN session with an unauthorized user.\r\n\r This vulnerability is due to improper separation of authentication, authorization, and accounting (AAA) between the remote access VPN feature and the HTTPS management and site-to-site VPN features. An attacker could exploit this vulnerability by specifying a default connection profile/tunnel group while conducting a brute force attack or while establishing a clientless SSL VPN session using valid credentials. A successful exploit could allow the attacker to achieve one or both of the following:\r\n\r \r Identify valid credentials that could then be used to establish an unauthorized remote access VPN session.\r Establish a clientless SSL VPN session (only when running Cisco ASA Software Release 9.16 or earlier).\r \r Notes:\r\n\r \r Establishing a client-based remote access VPN tunnel is not possible as these default connection profiles/tunnel groups do not and cannot have an IP address pool configured.\r This vulnerability does not allow an attacker to bypass authentication. To successfully establish a remote access VPN session, valid credentials are required, including a valid second factor if multi-factor authentication (MFA) is configured.\r \r Cisco will release software updates that address this vulnerability. There are workarounds that address this vulnerability.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/20xxx/CVE-2023-20269.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Adaptive Security Appliance (ASA) Software\",\"versions\":[{\"version\":\"9.8.1\",\"status\":\"affected\"},{\"version\":\"9.8.1.5\",\"status\":\"affected\"},{\"version\":\"9.8.1.7\",\"status\":\"affected\"},{\"version\":\"9.8.2\",\"status\":\"affected\"},{\"version\":\"9.8.2.8\",\"status\":\"affected\"},{\"version\":\"9.8.2.14\",\"status\":\"affected\"},{\"version\":\"9.8.2.15\",\"status\":\"affected\"},{\"version\":\"9.8.2.17\",\"status\":\"affected\"},{\"version\":\"9.8.2.20\",\"status\":\"affected\"},{\"version\":\"9.8.2.24\",\"status\":\"affected\"},{\"version\":\"9.8.2.26\",\"status\":\"affected\"},{\"version\":\"9.8.2.28\",\"status\":\"affected\"},{\"version\":\"9.8.2.33\",\"status\":\"affected\"},{\"version\":\"9.8.2.35\",\"status\":\"affected\"},{\"version\":\"9.8.2.38\",\"status\":\"affected\"},{\"version\":\"9.8.3.8\",\"status\":\"affected\"},{\"version\":\"9.8.3.11\",\"status\":\"affected\"},{\"version\":\"9.8.3.14\",\"status\":\"affected\"},{\"version\":\"9.8.3.16\",\"status\":\"affected\"},{\"version\":\"9.8.3.18\",\"status\":\"affected\"},{\"version\":\"9.8.3.21\",\"status\":\"affected\"},{\"version\":\"9.8.3\",\"status\":\"affected\"},{\"version\":\"9.8.3.26\",\"status\":\"affected\"},{\"version\":\"9.8.3.29\",\"status\":\"affected\"},{\"version\":\"9.8.4\",\"status\":\"affected\"},{\"version\":\"9.8.4.3\",\"status\":\"affected\"},{\"version\":\"9.8.4.7\",\"status\":\"affected\"},{\"version\":\"9.8.4.8\",\"status\":\"affected\"},{\"version\":\"9.8.4.10\",\"status\":\"affected\"},{\"version\":\"9.8.4.12\",\"status\":\"affected\"},{\"version\":\"9.8.4.15\",\"status\":\"affected\"},{\"version\":\"9.8.4.17\",\"status\":\"affected\"},{\"version\":\"9.8.4.25\",\"status\":\"affected\"},{\"version\":\"9.8.4.20\",\"status\":\"affected\"},{\"version\":\"9.8.4.22\",\"status\":\"affected\"},{\"version\":\"9.8.4.26\",\"status\":\"affected\"},{\"version\":\"9.8.4.29\",\"status\":\"affected\"},{\"version\":\"9.8.4.32\",\"status\":\"affected\"},{\"version\":\"9.8.4.33\",\"status\":\"affected\"},{\"version\":\"9.8.4.34\",\"status\":\"affected\"},{\"version\":\"9.8.4.35\",\"status\":\"affected\"},{\"version\":\"9.8.4.39\",\"status\":\"affected\"},{\"version\":\"9.8.4.40\",\"status\":\"affected\"},{\"version\":\"9.8.4.41\",\"status\":\"affected\"},{\"version\":\"9.8.4.43\",\"status\":\"affected\"},{\"version\":\"9.8.4.44\",\"status\":\"affected\"},{\"version\":\"9.8.4.45\",\"status\":\"affected\"},{\"version\":\"9.8.4.46\",\"status\":\"affected\"},{\"version\":\"9.8.4.48\",\"status\":\"affected\"},{\"version\":\"9.12.1\",\"status\":\"affected\"},{\"version\":\"9.12.1.2\",\"status\":\"affected\"},{\"version\":\"9.12.1.3\",\"status\":\"affected\"},{\"version\":\"9.12.2\",\"status\":\"affected\"},{\"version\":\"9.12.2.4\",\"status\":\"affected\"},{\"version\":\"9.12.2.5\",\"status\":\"affected\"},{\"version\":\"9.12.2.9\",\"status\":\"affected\"},{\"version\":\"9.12.3\",\"status\":\"affected\"},{\"version\":\"9.12.3.2\",\"status\":\"affected\"},{\"version\":\"9.12.3.7\",\"status\":\"affected\"},{\"version\":\"9.12.4\",\"status\":\"affected\"},{\"version\":\"9.12.3.12\",\"status\":\"affected\"},{\"version\":\"9.12.3.9\",\"status\":\"affected\"},{\"version\":\"9.12.2.1\",\"status\":\"affected\"},{\"version\":\"9.12.4.2\",\"status\":\"affected\"},{\"version\":\"9.12.4.4\",\"status\":\"affected\"},{\"version\":\"9.12.4.7\",\"status\":\"affected\"},{\"version\":\"9.12.4.10\",\"status\":\"affected\"},{\"version\":\"9.12.4.13\",\"status\":\"affected\"},{\"version\":\"9.12.4.8\",\"status\":\"affected\"},{\"version\":\"9.12.4.18\",\"status\":\"affected\"},{\"version\":\"9.12.4.24\",\"status\":\"affected\"},{\"version\":\"9.12.4.26\",\"status\":\"affected\"},{\"version\":\"9.12.4.29\",\"status\":\"affected\"},{\"version\":\"9.12.4.30\",\"status\":\"affected\"},{\"version\":\"9.12.4.35\",\"status\":\"affected\"},{\"version\":\"9.12.4.37\",\"status\":\"affected\"},{\"version\":\"9.12.4.38\",\"status\":\"affected\"},{\"version\":\"9.12.4.39\",\"status\":\"affected\"},{\"version\":\"9.12.4.40\",\"status\":\"affected\"},{\"version\":\"9.12.4.41\",\"status\":\"affected\"},{\"version\":\"9.12.4.47\",\"status\":\"affected\"},{\"version\":\"9.12.4.48\",\"status\":\"affected\"},{\"version\":\"9.12.4.50\",\"status\":\"affected\"},{\"version\":\"9.12.4.52\",\"status\":\"affected\"},{\"version\":\"9.12.4.54\",\"status\":\"affected\"},{\"version\":\"9.12.4.55\",\"status\":\"affected\"},{\"version\":\"9.12.4.56\",\"status\":\"affected\"},{\"version\":\"9.12.4.58\",\"status\":\"affected\"},{\"version\":\"9.14.1\",\"status\":\"affected\"},{\"version\":\"9.14.1.10\",\"status\":\"affected\"},{\"version\":\"9.14.1.6\",\"status\":\"affected\"},{\"version\":\"9.14.1.15\",\"status\":\"affected\"},{\"version\":\"9.14.1.19\",\"status\":\"affected\"},{\"version\":\"9.14.1.30\",\"status\":\"affected\"},{\"version\":\"9.14.2\",\"status\":\"affected\"},{\"version\":\"9.14.2.4\",\"status\":\"affected\"},{\"version\":\"9.14.2.8\",\"status\":\"affected\"},{\"version\":\"9.14.2.13\",\"status\":\"affected\"},{\"version\":\"9.14.2.15\",\"status\":\"affected\"},{\"version\":\"9.14.3\",\"status\":\"affected\"},{\"version\":\"9.14.3.1\",\"status\":\"affected\"},{\"version\":\"9.14.3.9\",\"status\":\"affected\"},{\"version\":\"9.14.3.11\",\"status\":\"affected\"},{\"version\":\"9.14.3.13\",\"status\":\"affected\"},{\"version\":\"9.14.3.18\",\"status\":\"affected\"},{\"version\":\"9.14.3.15\",\"status\":\"affected\"},{\"version\":\"9.14.4\",\"status\":\"affected\"},{\"version\":\"9.14.4.6\",\"status\":\"affected\"},{\"version\":\"9.14.4.7\",\"status\":\"affected\"},{\"version\":\"9.14.4.12\",\"status\":\"affected\"},{\"version\":\"9.14.4.13\",\"status\":\"affected\"},{\"version\":\"9.14.4.14\",\"status\":\"affected\"},{\"version\":\"9.14.4.15\",\"status\":\"affected\"},{\"version\":\"9.14.4.17\",\"status\":\"affected\"},{\"version\":\"9.14.4.22\",\"status\":\"affected\"},{\"version\":\"9.14.4.23\",\"status\":\"affected\"},{\"version\":\"9.15.1\",\"status\":\"affected\"},{\"version\":\"9.15.1.7\",\"status\":\"affected\"},{\"version\":\"9.15.1.10\",\"status\":\"affected\"},{\"version\":\"9.15.1.15\",\"status\":\"affected\"},{\"version\":\"9.15.1.16\",\"status\":\"affected\"},{\"version\":\"9.15.1.17\",\"status\":\"affected\"},{\"version\":\"9.15.1.1\",\"status\":\"affected\"},{\"version\":\"9.15.1.21\",\"status\":\"affected\"},{\"version\":\"9.16.1\",\"status\":\"affected\"},{\"version\":\"9.16.1.28\",\"status\":\"affected\"},{\"version\":\"9.16.2\",\"status\":\"affected\"},{\"version\":\"9.16.2.3\",\"status\":\"affected\"},{\"version\":\"9.16.2.7\",\"status\":\"affected\"},{\"version\":\"9.16.2.11\",\"status\":\"affected\"},{\"version\":\"9.16.2.13\",\"status\":\"affected\"},{\"version\":\"9.16.2.14\",\"status\":\"affected\"},{\"version\":\"9.16.3\",\"status\":\"affected\"},{\"version\":\"9.16.3.3\",\"status\":\"affected\"},{\"version\":\"9.16.3.14\",\"status\":\"affected\"},{\"version\":\"9.16.3.15\",\"status\":\"affected\"},{\"version\":\"9.16.3.19\",\"status\":\"affected\"},{\"version\":\"9.16.3.23\",\"status\":\"affected\"},{\"version\":\"9.16.4\",\"status\":\"affected\"},{\"version\":\"9.16.4.9\",\"status\":\"affected\"},{\"version\":\"9.16.4.14\",\"status\":\"affected\"},{\"version\":\"9.16.4.18\",\"status\":\"affected\"},{\"version\":\"9.16.4.19\",\"status\":\"affected\"},{\"version\":\"9.16.4.27\",\"status\":\"affected\"},{\"version\":\"9.16.4.38\",\"status\":\"affected\"},{\"version\":\"9.17.1\",\"status\":\"affected\"},{\"version\":\"9.17.1.7\",\"status\":\"affected\"},{\"version\":\"9.17.1.9\",\"status\":\"affected\"},{\"version\":\"9.17.1.10\",\"status\":\"affected\"},{\"version\":\"9.17.1.11\",\"status\":\"affected\"},{\"version\":\"9.17.1.13\",\"status\":\"affected\"},{\"version\":\"9.17.1.15\",\"status\":\"affected\"},{\"version\":\"9.17.1.20\",\"status\":\"affected\"},{\"version\":\"9.17.1.30\",\"status\":\"affected\"},{\"version\":\"9.18.1\",\"status\":\"affected\"},{\"version\":\"9.18.1.3\",\"status\":\"affected\"},{\"version\":\"9.18.2\",\"status\":\"affected\"},{\"version\":\"9.18.2.5\",\"status\":\"affected\"},{\"version\":\"9.18.2.7\",\"status\":\"affected\"},{\"version\":\"9.18.2.8\",\"status\":\"affected\"},{\"version\":\"9.18.3\",\"status\":\"affected\"},{\"version\":\"9.18.3.39\",\"status\":\"affected\"},{\"version\":\"9.18.3.46\",\"status\":\"affected\"},{\"version\":\"9.18.3.53\",\"status\":\"affected\"},{\"version\":\"9.18.3.55\",\"status\":\"affected\"},{\"version\":\"9.19.1\",\"status\":\"affected\"},{\"version\":\"9.19.1.5\",\"status\":\"affected\"},{\"version\":\"9.19.1.9\",\"status\":\"affected\"},{\"version\":\"9.19.1.12\",\"status\":\"affected\"},{\"version\":\"9.19.1.18\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/20xxx/CVE-2023-20269.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Firepower Threat Defense Software\",\"versions\":[{\"version\":\"6.2.3\",\"status\":\"affected\"},{\"version\":\"6.2.3.1\",\"status\":\"affected\"},{\"version\":\"6.2.3.2\",\"status\":\"affected\"},{\"version\":\"6.2.3.3\",\"status\":\"affected\"},{\"version\":\"6.2.3.4\",\"status\":\"affected\"},{\"version\":\"6.2.3.5\",\"status\":\"affected\"},{\"version\":\"6.2.3.6\",\"status\":\"affected\"},{\"version\":\"6.2.3.7\",\"status\":\"affected\"},{\"version\":\"6.2.3.8\",\"status\":\"affected\"},{\"version\":\"6.2.3.10\",\"status\":\"affected\"},{\"version\":\"6.2.3.11\",\"status\":\"affected\"},{\"version\":\"6.2.3.9\",\"status\":\"affected\"},{\"version\":\"6.2.3.12\",\"status\":\"affected\"},{\"version\":\"6.2.3.13\",\"status\":\"affected\"},{\"version\":\"6.2.3.14\",\"status\":\"affected\"},{\"version\":\"6.2.3.15\",\"status\":\"affected\"},{\"version\":\"6.2.3.16\",\"status\":\"affected\"},{\"version\":\"6.2.3.17\",\"status\":\"affected\"},{\"version\":\"6.2.3.18\",\"status\":\"affected\"},{\"version\":\"6.6.0\",\"status\":\"affected\"},{\"version\":\"6.6.0.1\",\"status\":\"affected\"},{\"version\":\"6.6.1\",\"status\":\"affected\"},{\"version\":\"6.6.3\",\"status\":\"affected\"},{\"version\":\"6.6.4\",\"status\":\"affected\"},{\"version\":\"6.6.5\",\"status\":\"affected\"},{\"version\":\"6.6.5.1\",\"status\":\"affected\"},{\"version\":\"6.6.5.2\",\"status\":\"affected\"},{\"version\":\"6.6.7\",\"status\":\"affected\"},{\"version\":\"6.6.7.1\",\"status\":\"affected\"},{\"version\":\"6.4.0\",\"status\":\"affected\"},{\"version\":\"6.4.0.1\",\"status\":\"affected\"},{\"version\":\"6.4.0.3\",\"status\":\"affected\"},{\"version\":\"6.4.0.2\",\"status\":\"affected\"},{\"version\":\"6.4.0.4\",\"status\":\"affected\"},{\"version\":\"6.4.0.5\",\"status\":\"affected\"},{\"version\":\"6.4.0.6\",\"status\":\"affected\"},{\"version\":\"6.4.0.7\",\"status\":\"affected\"},{\"version\":\"6.4.0.8\",\"status\":\"affected\"},{\"version\":\"6.4.0.9\",\"status\":\"affected\"},{\"version\":\"6.4.0.10\",\"status\":\"affected\"},{\"version\":\"6.4.0.11\",\"status\":\"affected\"},{\"version\":\"6.4.0.12\",\"status\":\"affected\"},{\"version\":\"6.4.0.13\",\"status\":\"affected\"},{\"version\":\"6.4.0.14\",\"status\":\"affected\"},{\"version\":\"6.4.0.15\",\"status\":\"affected\"},{\"version\":\"6.4.0.16\",\"status\":\"affected\"},{\"version\":\"6.7.0\",\"status\":\"affected\"},{\"version\":\"6.7.0.1\",\"status\":\"affected\"},{\"version\":\"6.7.0.2\",\"status\":\"affected\"},{\"version\":\"6.7.0.3\",\"status\":\"affected\"},{\"version\":\"7.0.0\",\"status\":\"affected\"},{\"version\":\"7.0.0.1\",\"status\":\"affected\"},{\"version\":\"7.0.1\",\"status\":\"affected\"},{\"version\":\"7.0.1.1\",\"status\":\"affected\"},{\"version\":\"7.0.2\",\"status\":\"affected\"},{\"version\":\"7.0.2.1\",\"status\":\"affected\"},{\"version\":\"7.0.3\",\"status\":\"affected\"},{\"version\":\"7.0.4\",\"status\":\"affected\"},{\"version\":\"7.0.5\",\"status\":\"affected\"},{\"version\":\"7.0.6\",\"status\":\"affected\"},{\"version\":\"7.1.0\",\"status\":\"affected\"},{\"version\":\"7.1.0.1\",\"status\":\"affected\"},{\"version\":\"7.1.0.2\",\"status\":\"affected\"},{\"version\":\"7.1.0.3\",\"status\":\"affected\"},{\"version\":\"7.2.0\",\"status\":\"affected\"},{\"version\":\"7.2.0.1\",\"status\":\"affected\"},{\"version\":\"7.2.1\",\"status\":\"affected\"},{\"version\":\"7.2.2\",\"status\":\"affected\"},{\"version\":\"7.2.3\",\"status\":\"affected\"},{\"version\":\"7.2.4\",\"status\":\"affected\"},{\"version\":\"7.2.4.1\",\"status\":\"affected\"},{\"version\":\"7.2.5\",\"status\":\"affected\"},{\"version\":\"7.3.0\",\"status\":\"affected\"},{\"version\":\"7.3.1\",\"status\":\"affected\"},{\"version\":\"7.3.1.1\",\"status\":\"affected\"},{\"version\":\"7.4.0\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-20269", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-20269\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-20269（Cisco Adaptive Security Appliance (ASA) Software / Cisco Firepower Threat Defense Software）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者はリモートからアクセスし、認証されていない状態でブルートフォース攻撃を実行できること。\n・攻撃者は認証済みで、かつ有効な認証情報（MFA が設定されている場合は第二要素も含む）を使用してクライアントレス SSL VPN セッションを確立できること。\n・攻撃にはデフォルト接続プロファイル／トンネルグループを指定する必要があること。\n・クライアントレス SSL VPN セッションの確立は、Cisco ASA ソフトウェアリリース 9.16 以前でのみ可能であること。\n・対象製品は Cisco Adaptive Security Appliance (ASA) ソフトウェアおよび Cisco Firepower Threat Defense (FTD) ソフトウェアであること。\n・公式の対象表：Cisco / Cisco Adaptive Security Appliance (ASA) Software。影響ありとして記載：9.8.1。影響ありとして記載：9.8.1.5。影響ありとして記載：9.8.1.7。影響ありとして記載：9.8.2。影響ありとして記載：9.8.2.8。影響ありとして記載：9.8.2.14。影響ありとして記載：9.8.2.15。影響ありとして記載：9.8.2.17。影響ありとして記載：9.8.2.20。影響ありとして記載：9.8.2.24。影響ありとして記載：9.8.2.26。影響ありとして記載：9.8.2.28。影響ありとして記載：9.8.2.33。影響ありとして記載：9.8.2.35。影響ありとして記載：9.8.2.38。影響ありとして記載：9.8.3.8。影響ありとして記載：9.8.3.11。影響ありとして記載：9.8.3.14。影響ありとして記載：9.8.3.16。影響ありとして記載：9.8.3.18。影響ありとして記載：9.8.3.21。影響ありとして記載：9.8.3。影響ありとして記載：9.8.3.26。影響ありとして記載：9.8.3.29。影響ありとして記載：9.8.4。影響ありとして記載：9.8.4.3。影響ありとして記載：9.8.4.7。影響ありとして記載：9.8.4.8。影響ありとして記載：9.8.4.10。影響ありとして記載：9.8.4.12。影響ありとして記載：9.8.4.15。影響ありとして記載：9.8.4.17。影響ありとして記載：9.8.4.25。影響ありとして記載：9.8.4.20。影響ありとして記載：9.8.4.22。影響ありとして記載：9.8.4.26。影響ありとして記載：9.8.4.29。影響ありとして記載：9.8.4.32。影響ありとして記載：9.8.4.33。影響ありとして記載：9.8.4.34。影響ありとして記載：9.8.4.35。影響ありとして記載：9.8.4.39。影響ありとして記載：9.8.4.40。影響ありとして記載：9.8.4.41。影響ありとして記載：9.8.4.43。影響ありとして記載：9.8.4.44。影響ありとして記載：9.8.4.45。影響ありとして記載：9.8.4.46。影響ありとして記載：9.8.4.48。影響ありとして記載：9.12.1。影響ありとして記載：9.12.1.2。影響ありとして記載：9.12.1.3。影響ありとして記載：9.12.2。影響ありとして記載：9.12.2.4。影響ありとして記載：9.12.2.5。影響ありとして記載：9.12.2.9。影響ありとして記載：9.12.3。影響ありとして記載：9.12.3.2。影響ありとして記載：9.12.3.7。影響ありとして記載：9.12.4。影響ありとして記載：9.12.3.12。影響ありとして記載：9.12.3.9。影響ありとして記載：9.12.2.1。影響ありとして記載：9.12.4.2。影響ありとして記載：9.12.4.4。影響ありとして記載：9.12.4.7。影響ありとして記載：9.12.4.10。影響ありとして記載：9.12.4.13。影響ありとして記載：9.12.4.8。影響ありとして記載：9.12.4.18。影響ありとして記載：9.12.4.24。影響ありとして記載：9.12.4.26。影響ありとして記載：9.12.4.29。影響ありとして記載：9.12.4.30。影響ありとして記載：9.12.4.35。影響ありとして記載：9.12.4.37。影響ありとして記載：9.12.4.38。影響ありとして記載：9.12.4.39。影響ありとして記載：9.12.4.40。影響ありとして記載：9.12.4.41。影響ありとして記載：9.12.4.47。影響ありとして記載：9.12.4.48。影響ありとして記載：9.12.4.50。影響ありとして記載：9.12.4.52。影響ありとして記載：9.12.4.54。影響ありとして記載：9.12.4.55。影響ありとして記載：9.12.4.56。影響ありとして記載：9.12.4.58。影響ありとして記載：9.14.1。影響ありとして記載：9.14.1.10。影響ありとして記載：9.14.1.6。影響ありとして記載：9.14.1.15。影響ありとして記載：9.14.1.19。影響ありとして記載：9.14.1.30。影響ありとして記載：9.14.2。影響ありとして記載：9.14.2.4。影響ありとして記載：9.14.2.8。影響ありとして記載：9.14.2.13。影響ありとして記載：9.14.2.15。影響ありとして記載：9.14.3。影響ありとして記載：9.14.3.1。影響ありとして記載：9.14.3.9。影響ありとして記載：9.14.3.11。影響ありとして記載：9.14.3.13。影響ありとして記載：9.14.3.18。影響ありとして記載：9.14.3.15。影響ありとして記載：9.14.4。影響ありとして記載：9.14.4.6。影響ありとして記載：9.14.4.7。影響ありとして記載：9.14.4.12。影響ありとして記載：9.14.4.13。影響ありとして記載：9.14.4.14。影響ありとして記載：9.14.4.15。影響ありとして記載：9.14.4.17。影響ありとして記載：9.14.4.22。影響ありとして記載：9.14.4.23。影響ありとして記載：9.15.1。影響ありとして記載：9.15.1.7。影響ありとして記載：9.15.1.10。影響ありとして記載：9.15.1.15。影響ありとして記載：9.15.1.16。影響ありとして記載：9.15.1.17。影響ありとして記載：9.15.1.1。影響ありとして記載：9.15.1.21。影響ありとして記載：9.16.1。影響ありとして記載：9.16.1.28。影響ありとして記載：9.16.2。影響ありとして記載：9.16.2.3。影響ありとして記載：9.16.2.7。影響ありとして記載：9.16.2.11。影響ありとして記載：9.16.2.13。影響ありとして記載：9.16.2.14。影響ありとして記載：9.16.3。影響ありとして記載：9.16.3.3。影響ありとして記載：9.16.3.14。影響ありとして記載：9.16.3.15。影響ありとして記載：9.16.3.19。影響ありとして記載：9.16.3.23。影響ありとして記載：9.16.4。影響ありとして記載：9.16.4.9。影響ありとして記載：9.16.4.14。影響ありとして記載：9.16.4.18。影響ありとして記載：9.16.4.19。影響ありとして記載：9.16.4.27。影響ありとして記載：9.16.4.38。影響ありとして記載：9.17.1。影響ありとして記載：9.17.1.7。影響ありとして記載：9.17.1.9。影響ありとして記載：9.17.1.10。影響ありとして記載：9.17.1.11。影響ありとして記載：9.17.1.13。影響ありとして記載：9.17.1.15。影響ありとして記載：9.17.1.20。影響ありとして記載：9.17.1.30。影響ありとして記載：9.18.1。影響ありとして記載：9.18.1.3。影響ありとして記載：9.18.2。影響ありとして記載：9.18.2.5。影響ありとして記載：9.18.2.7。影響ありとして記載：9.18.2.8。影響ありとして記載：9.18.3。影響ありとして記載：9.18.3.39。影響ありとして記載：9.18.3.46。影響ありとして記載：9.18.3.53。影響ありとして記載：9.18.3.55。影響ありとして記載：9.19.1。影響ありとして記載：9.19.1.5。影響ありとして記載：9.19.1.9。影響ありとして記載：9.19.1.12。影響ありとして記載：9.19.1.18。\n・公式の対象表：Cisco / Cisco Firepower Threat Defense Software。影響ありとして記載：6.2.3。影響ありとして記載：6.2.3.1。影響ありとして記載：6.2.3.2。影響ありとして記載：6.2.3.3。影響ありとして記載：6.2.3.4。影響ありとして記載：6.2.3.5。影響ありとして記載：6.2.3.6。影響ありとして記載：6.2.3.7。影響ありとして記載：6.2.3.8。影響ありとして記載：6.2.3.10。影響ありとして記載：6.2.3.11。影響ありとして記載：6.2.3.9。影響ありとして記載：6.2.3.12。影響ありとして記載：6.2.3.13。影響ありとして記載：6.2.3.14。影響ありとして記載：6.2.3.15。影響ありとして記載：6.2.3.16。影響ありとして記載：6.2.3.17。影響ありとして記載：6.2.3.18。影響ありとして記載：6.6.0。影響ありとして記載：6.6.0.1。影響ありとして記載：6.6.1。影響ありとして記載：6.6.3。影響ありとして記載：6.6.4。影響ありとして記載：6.6.5。影響ありとして記載：6.6.5.1。影響ありとして記載：6.6.5.2。影響ありとして記載：6.6.7。影響ありとして記載：6.6.7.1。影響ありとして記載：6.4.0。影響ありとして記載：6.4.0.1。影響ありとして記載：6.4.0.3。影響ありとして記載：6.4.0.2。影響ありとして記載：6.4.0.4。影響ありとして記載：6.4.0.5。影響ありとして記載：6.4.0.6。影響ありとして記載：6.4.0.7。影響ありとして記載：6.4.0.8。影響ありとして記載：6.4.0.9。影響ありとして記載：6.4.0.10。影響ありとして記載：6.4.0.11。影響ありとして記載：6.4.0.12。影響ありとして記載：6.4.0.13。影響ありとして記載：6.4.0.14。影響ありとして記載：6.4.0.15。影響ありとして記載：6.4.0.16。影響ありとして記載：6.7.0。影響ありとして記載：6.7.0.1。影響ありとして記載：6.7.0.2。影響ありとして記載：6.7.0.3。影響ありとして記載：7.0.0。影響ありとして記載：7.0.0.1。影響ありとして記載：7.0.1。影響ありとして記載：7.0.1.1。影響ありとして記載：7.0.2。影響ありとして記載：7.0.2.1。影響ありとして記載：7.0.3。影響ありとして記載：7.0.4。影響ありとして記載：7.0.5。影響ありとして記載：7.0.6。影響ありとして記載：7.1.0。影響ありとして記載：7.1.0.1。影響ありとして記載：7.1.0.2。影響ありとして記載：7.1.0.3。影響ありとして記載：7.2.0。影響ありとして記載：7.2.0.1。影響ありとして記載：7.2.1。影響ありとして記載：7.2.2。影響ありとして記載：7.2.3。影響ありとして記載：7.2.4。影響ありとして記載：7.2.4.1。影響ありとして記載：7.2.5。影響ありとして記載：7.3.0。影響ありとして記載：7.3.1。影響ありとして記載：7.3.1.1。影響ありとして記載：7.4.0。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-20269", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-25T05:33:33.190Z", "lastSuccess": "2026-10-25T05:33:33.190Z", "sourceCheckedAt": "2026-10-25T05:33:33.190Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2023-35674", "aliases": [], "title": "Android：脆弱性情報", "summary": "WindowState.java の onCreate メソッドで論理エラーがあり、バックグラウンドアクティビティを起動できる可能性があります。この欠陥により、追加の実行権限なしでローカルで権限がエスカレーションされます。攻撃の実行にはユーザーの操作は不要です。", "risk": "ローカルで権限がエスカレーションされ、攻撃者が本来許可されていない操作を行えるようになります。", "product": "Android", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "google_android", "cvssVector": null, "affected": [ { "product": "Android", "range": "13" }, { "product": "Android", "range": "12L" }, { "product": "Android", "range": "12" }, { "product": "Android", "range": "11" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/35xxx/CVE-2023-35674.json", "label": "CVE：google_android" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-35674", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-35674", "label": "CVE公式レコード" }, { "url": "https://android.googlesource.com/platform/frameworks/base/+/7428962d3b064ce1122809d87af65099d1129c9e", "label": "CVE掲載の参考情報" }, { "url": "https://source.android.com/security/bulletin/2023-09-01", "label": "CVE掲載の参考情報" }, { "url": "https://source.android.com/docs/security/bulletin/2023-09-01", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35674", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-09-11T20:09:53.580Z", "modifiedAt": "2025-10-21T23:05:38.736Z", "fetchedAt": "2026-10-25T05:33:36.999Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Google", "product": "Android", "versions": [ { "version": "13", "status": "affected" }, { "version": "12L", "status": "affected" }, { "version": "12", "status": "affected" }, { "version": "11", "status": "affected" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-35674", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/35xxx/CVE-2023-35674.json", "fetchedAt": "2026-10-25T05:33:36.999Z", "publishedAt": "2023-09-11T20:09:53.580Z", "modifiedAt": "2025-10-21T23:05:38.736Z", "state": "published", "provider": "google_android", "title": "", "descriptions": [ { "lang": "en", "value": "In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Android Framework contains an unspecified vulnerability that allows for privilege escalation.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-35674", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Google", "product": "Android", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "12L", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "11", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "Elevation of privilege", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/2/cvssV3_1" } ], "references": [ { "url": "https://android.googlesource.com/platform/frameworks/base/+/7428962d3b064ce1122809d87af65099d1129c9e", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://source.android.com/security/bulletin/2023-09-01", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-35674", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/35xxx/CVE-2023-35674.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Google\",\"product\":\"Android\",\"versions\":[{\"version\":\"13\",\"status\":\"affected\"},{\"version\":\"12L\",\"status\":\"affected\"},{\"version\":\"12\",\"status\":\"affected\"},{\"version\":\"11\",\"status\":\"affected\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/35xxx/CVE-2023-35674.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/35xxx/CVE-2023-35674.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Elevation of privilege\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/2/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/35xxx/CVE-2023-35674.json", "sourcePath": "/containers/adp/1/metrics/2/cvssV3_1", "text": "{\"scope\":\"CHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-35674:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-35674", "sourcePath": "retained:/originalText", "text": "Android Framework contains an unspecified vulnerability that allows for privilege escalation.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-35674:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-35674", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-35674", "modifiedAt": "2023-09-13T00:00:00.000Z", "fetchedAt": "2026-10-25T05:17:50.551Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:38.736Z", "fetchedAt": "2026-10-25T05:33:36.999Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-09-13T00:00:00.000Z", "fetchedAt": "2026-10-25T05:17:50.551Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Androidに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-25T05:33:36.999Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "bfbb7d7beb35c5b53526fb4692a9e2695d612c0d4bd76e4426702ab93b2d8348", "sourceModifiedAt": "2025-10-21T23:05:38.736Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "WindowState.java の onCreate メソッドで論理エラーがあり、バックグラウンドアクティビティを起動できる可能性があります。この欠陥により、追加の実行権限なしでローカルで権限がエスカレーションされます。攻撃の実行にはユーザーの操作は不要です。", "risk": "ローカルで権限がエスカレーションされ、攻撃者が本来許可されていない操作を行えるようになります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1", "E2", "E3" ], "applicability": [ { "text": "攻撃者はユーザーの操作なしに、追加の実行権限を持たずにバックグラウンドアクティビティを起動できることが前提です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/35xxx/CVE-2023-35674.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Google / Android。影響ありとして記載：13。影響ありとして記載：12L。影響ありとして記載：12。影響ありとして記載：11。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/35xxx/CVE-2023-35674.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-35674" ], "evidenceIds": [ "E7" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/35xxx/CVE-2023-35674.json" ], "evidenceIds": [ "E4" ] }, { "text": "「Android」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-35674", "https://android.googlesource.com/platform/frameworks/base/+/7428962d3b064ce1122809d87af65099d1129c9e", "https://source.android.com/security/bulletin/2023-09-01", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-35674", "https://source.android.com/docs/security/bulletin/2023-09-01", "https://nvd.nist.gov/vuln/detail/CVE-2023-35674" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/35xxx/CVE-2023-35674.json" ], "evidenceIds": [ "E4" ] } ], "temporaryMitigations": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-35674" ], "evidenceIds": [ "E5", "E6" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/35xxx/CVE-2023-35674.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-35674", "https://android.googlesource.com/platform/frameworks/base/+/7428962d3b064ce1122809d87af65099d1129c9e", "https://source.android.com/security/bulletin/2023-09-01", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-35674", "https://source.android.com/docs/security/bulletin/2023-09-01", "https://nvd.nist.gov/vuln/detail/CVE-2023-35674" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/35xxx/CVE-2023-35674.json", "label": "CVE：google_android" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-35674", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-35674", "label": "CVE公式レコード" }, { "url": "https://android.googlesource.com/platform/frameworks/base/+/7428962d3b064ce1122809d87af65099d1129c9e", "label": "CVE掲載の参考情報" }, { "url": "https://source.android.com/security/bulletin/2023-09-01", "label": "CVE掲載の参考情報" }, { "url": "https://source.android.com/docs/security/bulletin/2023-09-01", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35674", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/35xxx/CVE-2023-35674.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/35xxx/CVE-2023-35674.json", "sourceField": "/containers/cna/problemTypes/0/descriptions/0", "excerpt": "{\"lang\":\"en\",\"description\":\"Elevation of privilege\"}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-35674", "sourceField": "retained:/originalText", "excerpt": "Android Framework contains an unspecified vulnerability that allows for privilege escalation.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/35xxx/CVE-2023-35674.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Google\",\"product\":\"Android\",\"versions\":[{\"version\":\"13\",\"status\":\"affected\"},{\"version\":\"12L\",\"status\":\"affected\"},{\"version\":\"12\",\"status\":\"affected\"},{\"version\":\"11\",\"status\":\"affected\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-35674", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-35674", "sourceField": "/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null }, { "id": "E7", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-35674", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-35674\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-35674（Android）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者はユーザーの操作なしに、追加の実行権限を持たずにバックグラウンドアクティビティを起動できることが前提です。\n・公式の対象表：Google / Android。影響ありとして記載：13。影響ありとして記載：12L。影響ありとして記載：12。影響ありとして記載：11。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-35674", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-25T05:33:36.999Z", "lastSuccess": "2026-10-25T05:33:36.999Z", "sourceCheckedAt": "2026-10-25T05:33:36.999Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2023-4863", "aliases": [], "title": "Chrome / libwebp：脆弱性情報", "summary": "Chrome / libwebpを使っている方が確認する情報です。製品名と版を確認し、提供元にこの番号への対応状況を問い合わせてください。公開された対象範囲を下に日本語で示しています。", "risk": "具体的な被害の種類を、取り込んだ情報から正確に整理できていません。製品を使っている場合は、CVE番号と利用中の版を添えて、影響と修正状況を提供元に確認してください。", "product": "Chrome / libwebp", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "Chrome", "cvssVector": null, "affected": [ { "product": "Chrome", "range": ">= 116.0.5845.187 / < 116.0.5845.187" }, { "product": "libwebp", "range": ">= 1.3.2 / < 1.3.2" } ], "fixed": [], "steps": [ "「CVE-2023-4863」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://www.cve.org/CVERecord?id=CVE-2023-4863", "label": "CVE公式レコード" }, { "url": "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html", "label": "CVE掲載の参考情報" }, { "url": "https://crbug.com/1479274", "label": "CVE掲載の参考情報" }, { "url": "https://en.bandisoft.com/honeyview/history/", "label": "CVE掲載の参考情報" }, { "url": "https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/", "label": "CVE掲載の参考情報" }, { "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a", "label": "CVE掲載の参考情報" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4863", "label": "CVE掲載の参考情報" }, { "url": "https://security-tracker.debian.org/tracker/CVE-2023-4863", "label": "CVE掲載の参考情報" }, { "url": "https://bugzilla.suse.com/show_bug.cgi?id=1215231", "label": "CVE掲載の参考情報" }, { "url": "https://news.ycombinator.com/item?id=37478403", "label": "CVE掲載の参考情報" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4863", "label": "CISA KEV（悪用確認）" }, { "url": "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html?m=1", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-4863", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-09-12T14:24:59.275Z", "modifiedAt": "2025-10-21T23:05:38.429Z", "fetchedAt": "2026-10-25T06:36:12.305Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)", "sourceTitle": "", "summaryMethod": "公開データの対象範囲・CVSS条件を日本語化し、製品ごとの一般的な操作手順を補足しています。個別の全文翻訳・環境診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Google", "product": "Chrome", "versions": [ { "version": "116.0.5845.187", "status": "affected", "lessThan": "116.0.5845.187", "versionType": "custom" } ] }, { "vendor": "Google", "product": "libwebp", "versions": [ { "version": "1.3.2", "status": "affected", "lessThan": "1.3.2", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-4863", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4863.json", "fetchedAt": "2026-10-25T06:36:12.305Z", "publishedAt": "2023-09-12T14:24:59.275Z", "modifiedAt": "2025-10-21T23:05:38.429Z", "state": "published", "provider": "Chrome", "title": "", "descriptions": [ { "lang": "en", "value": "Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Google Chromium WebP contains a heap-based buffer overflow vulnerability that allows a remote attacker to perform an out-of-bounds memory write via a crafted HTML page. This vulnerability can affect applications that use the WebP Codec.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4863", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Google", "product": "Chrome", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "116.0.5845.187", "lessThan": "116.0.5845.187", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Google", "product": "libwebp", "sourcePath": "/containers/cna/affected/1", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "1.3.2", "lessThan": "1.3.2", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "Heap buffer overflow", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://crbug.com/1479274", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://en.bandisoft.com/honeyview/history/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/4" }, { "url": "https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/5" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4863", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/6" }, { "url": "https://security-tracker.debian.org/tracker/CVE-2023-4863", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/7" }, { "url": "https://bugzilla.suse.com/show_bug.cgi?id=1215231", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/8" }, { "url": "https://news.ycombinator.com/item?id=37478403", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/9" }, { "url": "https://www.bleepingcomputer.com/news/google/google-fixes-another-chrome-zero-day-bug-exploited-in-attacks/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/10" }, { "url": "https://www.debian.org/security/2023/dsa-5496", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/11" }, { "url": "https://www.debian.org/security/2023/dsa-5497", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/12" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OZDGWWMJREPAGKWCJKSCM4WYLANSKIFX/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/13" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FYYKLG6CRGEDTNRBSU26EEWAO6D6U645/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/14" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PYZV7TMKF4QHZ54SFJX54BDN52VHGGCX/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/15" }, { "url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00015.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/16" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WHOLML7N2G5KCAZXFWC5IDFFHSQS5SDB/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/17" }, { "url": "https://www.debian.org/security/2023/dsa-5498", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/18" }, { "url": "https://security.gentoo.org/glsa/202309-05", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/19" }, { "url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00016.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/20" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T655QF7CQ3DYAMPFV7IECQYGDEUIVVT/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/21" }, { "url": "https://adamcaudill.com/2023/09/14/whose-cve-is-it-anyway/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/22" }, { "url": "https://github.com/webmproject/libwebp/releases/tag/v1.3.2", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/23" }, { "url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00017.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/24" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KUQ7CTX3W372X3UY56VVNAHCH6H2F4X3/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/25" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/21/4", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/26" }, { "url": "https://blog.isosceles.com/the-webp-0day/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/27" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/22/1", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/28" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/22/3", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/29" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/22/4", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/30" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/22/5", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/31" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/22/8", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/32" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/22/7", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/33" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/22/6", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/34" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/26/1", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/35" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/26/7", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/36" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/28/1", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/37" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/28/2", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/38" }, { "url": "http://www.openwall.com/lists/oss-security/2023/09/28/4", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/39" }, { "url": "https://security.netapp.com/advisory/ntap-20230929-0011/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/40" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTRUIS3564P7ZLM2S2IH4Y4KZ327LI4I/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/41" }, { "url": "https://sethmlarson.dev/security-developer-in-residence-weekly-report-16", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/42" }, { "url": "https://www.bentley.com/advisories/be-2023-0001/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/43" }, { "url": "https://security.gentoo.org/glsa/202401-10", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/44" }, { "url": "https://www.vicarius.io/vsociety/posts/zero-day-webp-vulnerability-cve-2023-4863", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/0/references/45" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4863", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4863.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Google\",\"product\":\"Chrome\",\"versions\":[{\"version\":\"116.0.5845.187\",\"status\":\"affected\",\"lessThan\":\"116.0.5845.187\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4863.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Google\",\"product\":\"libwebp\",\"versions\":[{\"version\":\"1.3.2\",\"status\":\"affected\",\"lessThan\":\"1.3.2\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4863.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4863.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Heap buffer overflow\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4863.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-4863:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4863", "sourcePath": "retained:/originalText", "text": "Google Chromium WebP contains a heap-based buffer overflow vulnerability that allows a remote attacker to perform an out-of-bounds memory write via a crafted HTML page. This vulnerability can affect applications that use the WebP Codec.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-4863:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4863", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4863", "modifiedAt": "2023-09-13T00:00:00.000Z", "fetchedAt": "2026-10-25T06:17:49.639Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:38.429Z", "fetchedAt": "2026-10-25T06:36:12.305Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2023-09-13T00:00:00.000Z", "fetchedAt": "2026-10-25T06:17:49.639Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Chrome / libwebpに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "structured", "reviewedAt": null, "reviewState": "unreviewed", "summary": "Chrome / libwebpを使っている方が確認する情報です。製品名と版を確認し、提供元にこの番号への対応状況を問い合わせてください。公開された対象範囲を下に日本語で示しています。", "risk": "具体的な被害の種類を、取り込んだ情報から正確に整理できていません。製品を使っている場合は、CVE番号と利用中の版を添えて、影響と修正状況を提供元に確認してください。", "applicability": [ { "text": "最初に「Chrome / libwebp」を使っているか、開発元・製品名・バージョンを確認します。同じカテゴリの製品を使っているだけでは、この問題の対象とは限りません。", "kind": "check", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-4863", "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html", "https://crbug.com/1479274", "https://en.bandisoft.com/honeyview/history/", "https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/", "https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/", "https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4863", "https://security-tracker.debian.org/tracker/CVE-2023-4863", "https://bugzilla.suse.com/show_bug.cgi?id=1215231", "https://news.ycombinator.com/item?id=37478403", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4863", "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html?m=1", "https://nvd.nist.gov/vuln/detail/CVE-2023-4863" ] }, { "text": "公開データの対象範囲：Chrome — 116.0.5845.187以上 かつ 116.0.5845.187未満。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-4863", "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html", "https://crbug.com/1479274", "https://en.bandisoft.com/honeyview/history/", "https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/", "https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/", "https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4863", "https://security-tracker.debian.org/tracker/CVE-2023-4863", "https://bugzilla.suse.com/show_bug.cgi?id=1215231", "https://news.ycombinator.com/item?id=37478403", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4863", "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html?m=1", "https://nvd.nist.gov/vuln/detail/CVE-2023-4863" ] }, { "text": "公開データの対象範囲：libwebp — 1.3.2以上 かつ 1.3.2未満。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-4863", "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html", "https://crbug.com/1479274", "https://en.bandisoft.com/honeyview/history/", "https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/", "https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/", "https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4863", "https://security-tracker.debian.org/tracker/CVE-2023-4863", "https://bugzilla.suse.com/show_bug.cgi?id=1215231", "https://news.ycombinator.com/item?id=37478403", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4863", "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html?m=1", "https://nvd.nist.gov/vuln/detail/CVE-2023-4863" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。利用している場合は、対象かどうかの確認と修正を優先してください。あなたの環境がすでに被害を受けたことを示す情報ではありません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4863" ] } ], "versionChecks": [ { "text": "「Chrome / libwebp」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-4863", "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html", "https://crbug.com/1479274", "https://en.bandisoft.com/honeyview/history/", "https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/", "https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/", "https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4863", "https://security-tracker.debian.org/tracker/CVE-2023-4863", "https://bugzilla.suse.com/show_bug.cgi?id=1215231", "https://news.ycombinator.com/item?id=37478403", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4863", "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html?m=1", "https://nvd.nist.gov/vuln/detail/CVE-2023-4863" ] } ], "actions": [ { "text": "「CVE-2023-4863」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-4863", "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html", "https://crbug.com/1479274", "https://en.bandisoft.com/honeyview/history/", "https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/", "https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/", "https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4863", "https://security-tracker.debian.org/tracker/CVE-2023-4863", "https://bugzilla.suse.com/show_bug.cgi?id=1215231", "https://news.ycombinator.com/item?id=37478403", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4863", "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html?m=1", "https://nvd.nist.gov/vuln/detail/CVE-2023-4863" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-4863", "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html", "https://crbug.com/1479274", "https://en.bandisoft.com/honeyview/history/", "https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/", "https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/", "https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4863", "https://security-tracker.debian.org/tracker/CVE-2023-4863", "https://bugzilla.suse.com/show_bug.cgi?id=1215231", "https://news.ycombinator.com/item?id=37478403", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4863", "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html?m=1", "https://nvd.nist.gov/vuln/detail/CVE-2023-4863" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-4863", "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html", "https://crbug.com/1479274", "https://en.bandisoft.com/honeyview/history/", "https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/", "https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/", "https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4863", "https://security-tracker.debian.org/tracker/CVE-2023-4863", "https://bugzilla.suse.com/show_bug.cgi?id=1215231", "https://news.ycombinator.com/item?id=37478403", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4863", "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html?m=1", "https://nvd.nist.gov/vuln/detail/CVE-2023-4863" ] } ], "verification": [ { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-4863", "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html", "https://crbug.com/1479274", "https://en.bandisoft.com/honeyview/history/", "https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/", "https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/", "https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4863", "https://security-tracker.debian.org/tracker/CVE-2023-4863", "https://bugzilla.suse.com/show_bug.cgi?id=1215231", "https://news.ycombinator.com/item?id=37478403", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4863", "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html?m=1", "https://nvd.nist.gov/vuln/detail/CVE-2023-4863" ] } ], "unknowns": [ "取り込んだ公開データには、修正済みと明記されたバージョン番号がありません。「修正されていない」と確定したわけではありません。下の問い合わせ文で、修正版の番号・提供場所・適用予定を確認できます。", "攻撃に必要なログイン権限・操作・有効な機能は、この画面のデータだけでは特定できません。利用中の構成を添えて提供元に確認してください。" ], "supportRequest": "件名：CVE-2023-4863（Chrome / libwebp）の影響と対応状況の確認\n\n利用中のサイト・機器・サービス：[記入してください]\n製品名・開発元：[記入してください]\n現在のバージョン・ビルド番号：[不明なら「不明」と記入]\n\nCVE-2023-4863について、次を教えてください。\n1. この環境は対象ですか。対象外の場合は、版・設定・機能などの判断理由を教えてください。\n2. 対象の場合、修正を含む版・パッケージ番号と、更新方法を教えてください。古い版に修正を取り込んでいる場合は、このCVEへの対応状況を教えてください。\n3. いつ対応できますか。再起動・停止時間・事前のバックアップや確認作業は必要ですか。\n4. すぐ更新できない場合、正式な回避策とその限界・副作用を教えてください。利用を続けてよい条件も知りたいです。\n5. 対応完了後、修正を確認できる版・設定・対応日時を連絡してください。\n\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-4863", "sources": [ { "url": "https://www.cve.org/CVERecord?id=CVE-2023-4863", "label": "CVE公式レコード" }, { "url": "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html", "label": "CVE掲載の参考情報" }, { "url": "https://crbug.com/1479274", "label": "CVE掲載の参考情報" }, { "url": "https://en.bandisoft.com/honeyview/history/", "label": "CVE掲載の参考情報" }, { "url": "https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/", "label": "CVE掲載の参考情報" }, { "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a", "label": "CVE掲載の参考情報" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4863", "label": "CVE掲載の参考情報" }, { "url": "https://security-tracker.debian.org/tracker/CVE-2023-4863", "label": "CVE掲載の参考情報" }, { "url": "https://bugzilla.suse.com/show_bug.cgi?id=1215231", "label": "CVE掲載の参考情報" }, { "url": "https://news.ycombinator.com/item?id=37478403", "label": "CVE掲載の参考情報" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4863", "label": "CISA KEV（悪用確認）" }, { "url": "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html?m=1", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-4863", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "glossary": [], "automation": { "status": "error", "lastAttempt": "2026-10-25T06:36:12.305Z", "lastSuccess": "2026-10-24T06:27:01.257Z", "sourceCheckedAt": "2026-10-25T06:36:12.305Z", "errorCode": "validation_failed" } } } ], "total": 2302, "limit": 20, "offset": 1280, "filters": { "product": "all", "type": "all", "q": "", "page": 65 }, "pagination": { "page": 65, "pageSize": 20, "totalPages": 116 }, "sources": [ { "name": "JVN", "status": "ok", "lastSuccess": "2026-10-25T06:17:49.639Z", "lastAttempt": "2026-10-25T06:17:49.639Z", "error": null, "recordCount": 20, "coverage": "JVNの新着・更新RSS。取得した記事を蓄積。JVN iPediaは含みません。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "PHP Security", "status": "error", "lastSuccess": "2026-10-25T05:17:50.551Z", "lastAttempt": "2026-10-25T06:17:49.639Z", "error": "GitHub API HTTP 429; 次回の定期取得で再確認", "recordCount": 66, "coverage": "PHP開発元の公開アドバイザリ。公開日が新しい順とは限らない直近100件を取得し蓄積。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CISA KEV", "status": "ok", "lastSuccess": "2026-10-25T06:17:49.639Z", "lastAttempt": "2026-10-25T06:17:49.639Z", "error": null, "recordCount": 1756, "coverage": "CISAの公式GitHubミラーにある悪用確認済み一覧全件。掲載日はKEV追加日。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "NVD", "status": "ok", "lastSuccess": "2026-10-25T06:17:49.639Z", "lastAttempt": "2026-10-25T06:17:49.639Z", "error": null, "recordCount": 15, "coverage": "WordPressを含む脆弱性。初回は公開7日分、以降は全製品の変更分からWordPressと保存済みIDを追跡。停止後は最後に確認できた時刻から最大7日幅・500件ずつ再開し、残りは次回取得。 今回: 2026-10-25T05:02:50.551Z 〜 2026-10-25T06:17:49.639Z、全製品の変更 16/16件まで確認、対象15件反映。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CVE", "status": "error", "lastSuccess": "2026-10-25T05:17:50.551Z", "lastAttempt": "2026-10-25T06:17:49.639Z", "error": "HTTP 404", "recordCount": 6, "coverage": "取得したPHP/JVN情報のうち、公開日が新しい最大6件のCVE公式レコードで条件を補足。", "cursor": null, "freshness": "fresh", "stale": false } ] }