CVE-2023-40546

Summary

CVE-2023-40546 is a vulnerability affecting the Shim component. When an error occurs during the creation of a new ESL variable, Shim attempts to log an error message. However, the logging function uses a different number of parameters than the format string, resulting in a crash under specific circumstances. This issue can potentially be exploited to cause denial-of-service conditions through unintended crashes.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.