RCE in Genians Genian Nac
CVE-2023-40253
Improper Authentication vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Authentication Abuse.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through V5.0.42 (Revision 117460); Genian NAC Suite V5.0: from V5.0.0 through V5.0.54; Genian ZTNA: from V6.0.0 through V6.0.15.
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.004 (29.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.0 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N.
Affected products
- Genians Genian_nac — versions 5.0.42
- Genians Genian Nac Suite V5.0 — versions V5.0.0
- Genians Genian Nac V4.0 — versions V4.0.0
- Genians Genian Nac V5.0 — versions V5.0.0
- Genians Genian Ztna — versions V6.0.0
- Genians Genian_ztna
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2023-40253?
- CVE-2023-40253 is a medium-severity vulnerability in Genians Genian Nac, classified under OS Command Injection. CVSS score: 6.0/10. Published 2023-08-11.
- How severe is CVE-2023-40253?
- Medium severity. CVSS v3 base score is 6.0 out of 10.