CVE-2023-30262

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Jun 9, 2023
Updated: Jan 6, 2025
CWE ID 502

Summary

CVE-2023-30262 is a vulnerability affecting MIM software Inc's MIM License Server and MIMpacs services, specifically versions 6.9 to 7.0. This issue permits a remote, unauthenticated attacker to execute arbitrary code through the RMI Registry service. Successful exploitation could result in significant data compromise or system takeover. The latest version, 7.0.10, includes a patch to address this vulnerability. Organizations using the affected software are advised to apply the update promptly to mitigate potential risks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share