CVE-2023-41971: Windows ZCC Upgrade DoS And Privilege Escalation Through RPC Control
Published May 2, 2024
·Updated
An Improper Link Resolution Before File Access ('Link Following') vulnerability in Zscaler Client Connector on Windows allows a system file to be overwritten.This issue affects Client Connector on Windows: before 3.7.
Affected Software
2 affected components
Zscaler Client Connector<3.7
Zscaler Client Connector Windows<3.7
Event History
May 2, 2024
CVE Published
via MITRE·01:11 PM
Data Sourced
via MITRE·01:11 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:23 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-41971?
CVE-2023-41971 is classified as a high severity vulnerability due to the potential impact of system file overwriting.
2
How do I fix CVE-2023-41971?
To fix CVE-2023-41971, upgrade Zscaler Client Connector to version 3.7 or later.
3
What is the impact of CVE-2023-41971?
The impact of CVE-2023-41971 is that it allows malicious actors to overwrite critical system files on Windows machines.
4
Which versions of Zscaler Client Connector are affected by CVE-2023-41971?
CVE-2023-41971 affects Zscaler Client Connector on Windows versions prior to 3.7.
5
Is there a workaround for CVE-2023-41971?
There are no official workarounds for CVE-2023-41971; upgrading to the patched version is the recommended approach.