CVE-2023-40254: SQL Injection
Download of Code Without Integrity Check vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Malicious Software Update.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through V5.0.42 (Revision 117460); Genian NAC Suite V5.0: from V5.0.0 through V5.0.54; Genian ZTNA: from V6.0.0 through V6.0.15.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-40254?
CVE-2023-40254 has been classified as a high severity vulnerability due to its potential for malicious software updates.
How do I fix CVE-2023-40254?
To fix CVE-2023-40254, update affected software versions of Genians Genian NAC and Genian ZTNA to the latest patched versions provided by the vendor.
Which versions are affected by CVE-2023-40254?
CVE-2023-40254 affects Genians Genian NAC versions from 4.0.0 to 4.0.155 and 5.0.0 to 5.0.55, along with specific revisions previously noted.
What impacts does CVE-2023-40254 have on my system?
CVE-2023-40254 can allow unauthorized code execution through a malicious software update, potentially compromising system integrity.
Is there a workaround for CVE-2023-40254?
Currently, there are no documented workarounds for CVE-2023-40254—upgrading to a secure version is the recommended approach.