What is CVE-2023-25953?

CVE-2023-25953 is a critical-severity vulnerability in Worksmobile Drive Explorer, classified under Code Injection. CVSS score: 9.8/10. Published 2023-05-23.

How severe is CVE-2023-25953?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Is CVE-2023-25953 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

RCE in Worksmobile Drive Explorer

CVE-2023-25953

Code injection vulnerability in Drive Explorer for macOS versions 3.5.4 and earlier allows an attacker who can login to the client where the affected product is installed to inject arbitrary code while processing the product execution. Since a full disk access privilege is required to execute LINE WORKS Drive Explorer, the attacker may be able to read and/or write to arbitrary files without the access privileges.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.006 (44.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Worksmobile Drive_explorer
Works Mobile Japan Corp. Drive Explorer For Macos — versions versions 3.5.4 and earlier

Weakness classification (CWE)

CWE-94 — Code Injection

Public proof-of-concept exploits

kohnakagawa/kohnakagawa

References

vultures@jpcert.or.jp (Release Notes)
vultures@jpcert.or.jp (Third Party Advisory)

Frequently asked questions

What is CVE-2023-25953?: CVE-2023-25953 is a critical-severity vulnerability in Worksmobile Drive Explorer, classified under Code Injection. CVSS score: 9.8/10. Published 2023-05-23.
How severe is CVE-2023-25953?: Critical severity. CVSS v3 base score is 9.8 out of 10.
Is CVE-2023-25953 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.