CVE-2023-20840

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Sep 4, 2023
Updated: Sep 7, 2023
CWE ID 125
CWE ID 787

Summary

CVE-2023-20840 is a vulnerability that affects the imgsys software. It is categorized as a medium severity vulnerability with a base score of 6.5. The vulnerability allows for out-of-bounds read and write operations due to missing valid range checking. Exploiting this vulnerability requires user interaction and high privileges on the system. The impact of successful exploitation includes a potential local escalation of privilege with system execution privileges. Affected products include r9ng4U, lAMRr5, sYyJEl, fWGaF5, pKnQKJ, sYyJE8, and tuGM68. To remediate this vulnerability, users should apply the patch identified by ALPS07326430 or Issue ID ALPS07326430. The potential danger posed by this vulnerability is high, as it can allow an attacker to gain unauthorized access and execute arbitrary code on the affected system.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-20840 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options