CVE-2022-23763CWE-346

DOUZONE BIZON NeoRS file download and execute vulnerability

High · published June 28, 2022

CVSS v3.1
7.8
EPSS
0%
Percentile
25.7
In the wild
Unconfirmed
What it is

Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and execute arbitrary files. Remote attackers can use this vulerability to encourage users to access crafted web pages, causing damage such as malicious code infections.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00335 · 25.7th percentile
Weakness
CWE-346 · Origin Validation Error
Published
2022-06-28T13:49Z
EPSS history
Timeline
  • 28 JUN 13:49Z
    DOUZONE BIZON NeoRS file download and execute vulnerability
    cvelistv5