Installer
CVE-2023-0860
HIGH
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Lifecycle Timeline
1DescriptionNVD
Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4.
AnalysisAI
Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Technical ContextAI
This vulnerability is classified under CWE-307. Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4. Affected products include: Modoboa Installer. Version information: prior to 2.0.4..
RemediationAI
A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
Privilege escalation vulnerability in Autodesk Installer applications where a maliciously crafted binary file exploits a
A maliciously crafted DLL file when placed in temporary files and folders that are leveraged by the Autodesk Installer c
A maliciously crafted DLL file can be forced to write beyond allocated boundaries in the Autodesk installer when parsing
A maliciously crafted file, when executed on the victim's machine, can lead to privilege escalation to NT AUTHORITY/SYST
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today