EUVD-2026-62587
GHSA-xc2x-q39j-746f
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable on TCP/4307 with no authentication or user interaction and low complexity (AV:N/AC:L/PR:N/UI:N); arbitrary script execution yields full C/I/A impact with no scope change.
Primary rating from Vendor (kaspersky).
CVSS VectorVendor: kaspersky
Lifecycle Timeline
5DescriptionCVE.org
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function.
AnalysisAI
Remote unauthenticated code execution in TrueConf Server (versions through 5.3.9, 5.4.9, and 5.5.5) allows a network attacker reachable on port 4307/TCP to invoke an undocumented function and run an arbitrary script without any authentication. Rooted in a missing authentication check (CWE-306) on a critical function, this flaw was disclosed by Kaspersky ICS-CERT and carries a CVSS 4.0 base score of 9.3. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The single hard prerequisite is network reachability to TCP port 4307 on a TrueConf Server running an affected version (5.3.X ≤ 5.3.9, 5.4.X ≤ 5.4.9, 5.5.X ≤ 5.5.5, or earlier); the attacker then calls a specific undocumented function that lacks an authentication check. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | All available signals point to genuine, high-priority risk rather than an inflated CVSS. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade TrueConf Server to a vendor-fixed release newer than the affected 5.3.9 / 5.4.9 / 5.5.5 branches; the exact fixed version is not stated in the available input, so confirm the patched build directly from the Kaspersky ICS-CERT advisory (https://ics-cert.kaspersky.com/advisories/2026/08/11/trueconf-server-missing-authentication-for-critical-function/) and the TrueConf vendor portal before deploying. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Inventory all systems running TrueConf Server versions 5.3.9, 5.4.9, and 5.5.5 and immediately restrict or disable access to port 4307/TCP through firewall rules and network segmentation, blocking all untrusted network paths to the affected services. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Remote code execution in TrueConf Server (versions 5.3.x through 5.3.9, 5.4.x through 5.4.9, 5.5.x through 5.5.5, and ea
Arbitrary code execution in TrueConf Client allows authenticated attackers on adjacent networks to deliver malicious upd
Stored XSS in TrueConf Server 5.5.2.10813 on Windows enables authenticated low-privileged users to inject malicious Java
CSV formula injection in TrueConf Server 5.5.2.10813 on Windows allows an authenticated low-privileged user to embed mal
Local code execution in TrueConf Client 8.5.2 lets an already-authenticated local user run arbitrary code in the context
A SQL injection issue in the web API in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows remote unauthenticated
Stored HTML injection (CWE-79) in TrueConf Server 5.5.2.10813 on Windows enables an authenticated attacker to embed arbi
A SQL injection issue in a database stored function in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows a low-p
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today