CVE-2023-32548

Summary

CVE-2023-32548 is a newly discovered vulnerability affecting WPS Office version 10.8.0.6186. An attacker, who can conduct a man-in-the-middle attack, can exploit this OS command injection flaw by connecting the product to a malicious server and sending a specially crafted data. Successful exploitation allows the attacker to execute arbitrary OS commands on the targeted system, potentially leading to significant security risks. Users are strongly advised to update their WPS Office software to the latest version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.