CVE-2023-41344

Summary

CVE-2023-41344 is a newly identified vulnerability affecting the NCSIST ManageEngine Mobile Device Manager (MDM) application. This issue involves a path traversal flaw in a special function, which allows an unauthenticated remote attacker to bypass authentication and gain unauthorized access to read arbitrary system files. Successful exploitation of this vulnerability can result in significant data exposure, potentially leading to serious security consequences. Organizations utilizing this MDM solution are urged to apply the necessary patches or updates as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.