CVE-2023-5463

ÉLEVÉE 7.8CVE-2023-5463 · Published 09/10/2023 · updated 17/06/2026

En bref

CVE-2023-5463 est une vulnérabilité ÉLEVÉE (CVSS 7.8) touchant xdppro (xinje).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.28%, plus élevée que 20.2% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
xdppro xinje	`≤ 3.7.17a`	No fix yet

Description

A vulnerability was found in XINJE XDPPro up to 3.7.17a. It has been rated as critical. Affected by this issue is some unknown functionality in the library cfgmgr32.dll. The manipulation leads to uncontrolled search path. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. VDB-241586 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

References

drive.google.com/drive/folders/1mpRxWOPjxVS980r0qu1IY_Hf0irKO-cu · Permissions Required
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free