What is CVE-2023-1705?

CVE-2023-1705 is a high-severity vulnerability in Forcepoint F|one Smartedge Agent, classified under Missing Authorization. CVSS score: 8.4/10. Published 2024-01-29.

How severe is CVE-2023-1705?

High severity. CVSS v3 base score is 8.4 out of 10.

Auth bypass in Forcepoint F|one Smartedge Agent

CVE-2023-1705

Missing Authorization vulnerability in Forcepoint F|One SmartEdge Agent on Windows (bgAutoinstaller service modules) allows Privilege Escalation, Functionality Bypass.This issue affects F|One SmartEdge Agent: before 1.7.0.230330-554.

Vulnerability class: Broken Access Control

EPSS: 0.002 (4.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.4 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H.

Affected products

Forcepoint F|one Smartedge Agent — versions 0
Forcepoint One_smartedge_agent

Weakness classification (CWE)

CWE-862 — Missing Authorization

References

psirt@forcepoint.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-1705?: CVE-2023-1705 is a high-severity vulnerability in Forcepoint F|one Smartedge Agent, classified under Missing Authorization. CVSS score: 8.4/10. Published 2024-01-29.
How severe is CVE-2023-1705?: High severity. CVSS v3 base score is 8.4 out of 10.