CVE-2023-40252: Code Injection
Improper Control of Generation of Code ('Code Injection') vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Replace Trusted Executable.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through V5.0.42 (Revision 117460); Genian NAC Suite V5.0: from V5.0.0 through V5.0.54; Genian ZTNA: from V6.0.0 through V6.0.15.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-40252?
CVE-2023-40252 has been assigned a critical severity rating due to its potential for code injection.
How do I fix CVE-2023-40252?
To fix CVE-2023-40252, update to the latest patched version of Genians Genian NAC or Genian ZTNA as specified in the security advisory.
What versions are affected by CVE-2023-40252?
CVE-2023-40252 affects Genians Genian NAC versions 4.0.0 to 4.0.155, 5.0.0 to 5.0.55, and Genians Genian ZTNA versions 6.0.0 to 6.0.16.
What are the risks of not addressing CVE-2023-40252?
Failure to address CVE-2023-40252 can lead to unauthorized code execution, which may compromise system integrity and security.
Who should be aware of CVE-2023-40252?
IT administrators and cybersecurity professionals managing Genians products must be aware of CVE-2023-40252 to safeguard their environments.