What is CVE-2022-23763?

CVE-2022-23763 is a high-severity vulnerability in Douzone Neors, classified under Origin Validation Error. CVSS score: 7.8/10. Published 2022-06-28.

How severe is CVE-2022-23763?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Douzone Neors

CVE-2022-23763

Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and execute arbitrary files. Remote attackers can use this vulerability to encourage users to access crafted web pages, causing damage such as malicious code infections.

EPSS: 0.003 (24.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Douzone Neors
Douzone Bizon Co.,ltd Neors — versions unspecified
Microsoft Windows

Weakness classification (CWE)

CWE-346 — Origin Validation Error

References

vuln@krcert.or.kr (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2022-23763?: CVE-2022-23763 is a high-severity vulnerability in Douzone Neors, classified under Origin Validation Error. CVSS score: 7.8/10. Published 2022-06-28.
How severe is CVE-2022-23763?: High severity. CVSS v3 base score is 7.8 out of 10.