CVE-2023-47267

CRITICAL 9.8CVE-2023-47267 · Published 19/12/2023 · updated 17/06/2026

In short

CVE-2023-47267 is a CRITICAL (CVSS 9.8) vulnerability affecting thegreenbow vpn client (thegreenbow).
Chance of exploitation in the next 30 days (EPSS): 0.75%, higher than 55.1% of all vulnerabilities.
Fix: update to 6.52.006, 6.87.108, 6.87.109 or later.

Package	Affected versions	Patched versions
thegreenbow vpn client thegreenbow	`≥ 6.52.004, < 6.52.006≥ 6.87.001, < 6.87.108≥ 6.87.001, < 6.87.109`	`6.52.0066.87.1086.87.109`

Description

An issue discovered in TheGreenBow Windows Enterprise Certified VPN Client 6.52, Windows Standard VPN Client 6.87, and Windows Enterprise VPN Client 6.87 allows attackers to gain escalated privileges via crafted changes to memory mapped file.

References

thegreenbow.com/en/support/security-alerts · Vendor Advisory

More vulnerabilities in thegreenbow vpn client

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free