CVE-2023-39341

Опубликовано: 09 авг. 2023

Источник: nvd

CVSS3: 3.3

EPSS Низкий

Описание

"FFRI yarai", "FFRI yarai Home and Business Edition" and their OEM products handle exceptional conditions improperly, which may lead to denial-of-service (DoS) condition. Affected products and versions are as follows: FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0, FFRI yarai Home and Business Edition version 1.4.0, InfoTrace Mark II Malware Protection (Mark II Zerona) versions 3.0.1 to 3.2.2, Zerona / Zerona PLUS versions 3.2.32 to 3.2.36, ActSecure χ versions 3.4.0 to 3.4.6 and 3.5.0, Dual Safe Powered by FFRI yarai version 1.4.1, EDR Plus Pack (Bundled FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0), and EDR Plus Pack Cloud (Bundled FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0).

Ссылки

https://jvn.jp/en/jp/JVN42527152/
Third Party Advisory
https://www.ffri.jp/security-info/index.htm
Vendor Advisory
https://www.skyseaclientview.net/news/230807_01/
Third Party Advisory
https://www.soliton.co.jp/support/zerona_notice_2023.html
Third Party Advisory
https://www.sourcenext.com/support/i/2023/230718_01
Third Party Advisory
https://www.support.nec.co.jp/View.aspx?id=3140109240
Permissions Required
https://jvn.jp/en/jp/JVN42527152/
Third Party Advisory
https://www.ffri.jp/security-info/index.htm
Vendor Advisory
https://www.skyseaclientview.net/news/230807_01/
Third Party Advisory
https://www.soliton.co.jp/support/zerona_notice_2023.html
Third Party Advisory
https://www.sourcenext.com/support/i/2023/230718_01
Third Party Advisory
https://www.support.nec.co.jp/View.aspx?id=3140109240
Permissions Required

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ffri:dual_safe:1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:ffri:ffri_yarai:*:*:*:*:-:*:*:*

Версия от 3.4.0 (включая) до 3.4.6 (включая)

cpe:2.3:a:ffri:ffri_yarai:1.4.0:*:*:*:home_and_business:*:*:*

cpe:2.3:a:ffri:ffri_yarai:3.5.0:*:*:*:-:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:soliton:infotrace_mark_ii_malware_protection:*:*:*:*:*:*:*:*

Версия от 3.0.1 (включая) до 3.2.2 (включая)

cpe:2.3:a:soliton:zerona:*:*:*:*:*:*:*:*

Версия от 3.2.32 (включая) до 3.2.36 (включая)

cpe:2.3:a:soliton:zerona_plus:*:*:*:*:*:*:*:*

Версия от 3.2.32 (включая) до 3.2.36 (включая)

Конфигурация 3

Одно из

cpe:2.3:a:nec:actsecure_x_managed_security_service:*:*:*:*:*:*:*:*

Версия от 3.4.0 (включая) до 3.4.6 (включая)

cpe:2.3:a:nec:actsecure_x_managed_security_service:3.5.0:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:a:skygroup:edr_plus_pack:*:*:*:*:*:*:*:*

Версия от 3.4.0 (включая) до 3.4.6 (включая)

cpe:2.3:a:skygroup:edr_plus_pack:3.5.0:*:*:*:*:*:*:*

cpe:2.3:a:skygroup:edr_plus_pack_cloud:*:*:*:*:*:*:*:*

Версия от 3.4.0 (включая) до 3.4.6 (включая)

cpe:2.3:a:skygroup:edr_plus_pack_cloud:3.5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 9%

0.00032

Низкий

3.3 Low

CVSS3

Дефекты

CWE-755

Связанные уязвимости

GHSA-39xp-m58q-6r58

CVSS3: 3.3

github

больше 2 лет назад

"FFRI yarai", "FFRI yarai Home and Business Edition" and their OEM products handle exceptional conditions improperly, which may lead to denial-of-service (DoS) condition. Affected products and versions are as follows: FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0, FFRI yarai Home and Business Edition version 1.4.0, InfoTrace Mark II Malware Protection (Mark II Zerona) versions 3.0.1 to 3.2.2, Zerona / Zerona PLUS versions 3.2.32 to 3.2.36, ActSecure ? versions 3.4.0 to 3.4.6 and 3.5.0, Dual Safe Powered by FFRI yarai version 1.4.1, EDR Plus Pack (Bundled FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0), and EDR Plus Pack Cloud (Bundled FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0).

EPSS

Процентиль: 9%

0.00032

Низкий

3.3 Low

CVSS3

Дефекты

CWE-755