CVE-2023-35855
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Jun 19, 2023
Updated: Jun 30, 2023
CWE ID 120
Summary
CVE-2023-35855 is a buffer overflow vulnerability affecting Counter-Strike versions up to 8684. An attacker can exploit this issue by manipulating the lservercfgfile console variable on a game server, leading to arbitrary code execution on a connected client's machine. This vulnerability poses a significant risk as it allows attackers to gain unauthorized access and potentially install malware on remote systems. Players are advised to update their game client to the latest version to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Vendors
- Valve