CVE-2023-3314 HIGH

CVE-2023-3314

Vendor Trellix
Product Enterprise Security Manager
Weakness CWE-78
Published July 3, 2023
Last update October 25, 2024
View on NVD All CVEs

CVSS base score

8.1/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

What the vulnerability does

01Description

A vulnerability arises out of a failure to comprehensively sanitize the processing of a zip file(s). Incomplete neutralization of external commands used to control the process execution of the .zip application allows an authorized user to obtain control of the .zip application to execute arbitrary commands or obtain elevation of system privileges.

Key dates

02Disclosure timeline

July 3, 2023 CVE published
October 25, 2024 Record updated