CVE-2023-6061

CVSS 3.1 Score 6.6 of 10 (medium)

Details

Published Dec 8, 2023
Updated: Dec 12, 2023
CWE ID 427
CWE ID 426

Summary

CVE-2023-6061 is a Phantom DLL loading vulnerability that affects multiple components of Iconics SCADA Suite, including MMXFax.exe, winfax.dll, MelSim2ComProc.exe, Sim2ComProc.dll, MMXCall_in.exe, libdxxmt.dll, and libsrlmt.dll. This vulnerability allows attackers to execute malicious code by exploiting the applications' improper searching and loading of dynamic link libraries. The risk score for this vulnerability is 26 out of 100, with a base severity of MEDIUM. Remediation measures should be taken to address this issue and minimize potential dangers to organizations using the affected products.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future

Note: This is just a basic overview providing quick insights into CVE-2023-6061 information. Gain full access to comprehensive CVE data, third party vulnerabilities, compromised credentials and more with Recorded Future
  • Gain complete coverage of your cyber, third party, and physical attack surface
  • Proactively mitigate threats before they turn into costly attacks
  • Make fast, effective, data-driven decisions