CVE-2023-48387

Summary

CVE-2023-48387 is a newly discovered vulnerability affecting TAIWAN-CA(TWCA) JCICSecurityTool. The issue lies in the software's failure to verify the source of websites and access locations when executing certain Registry-related functions. An attacker can exploit this vulnerability by creating a malicious webpage. If a user, who has already completed identity verification, visits this malicious page while using the JCICSecurityTool, the attacker can gain the ability to read or modify any registry file under HKEY_CURRENT_USER, ultimately resulting in remote code execution.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.