Genian Ztna 6 0 46 Release
Monthly
Unauthenticated invocation of internal functions on the Genian NAC/ZTNA policy server's internal-only IPC SOAP endpoint allows a network-reachable attacker to manipulate protected data and degrade or shut down the service, scoring 9.3 (CVSS 4.0) and assessed as CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H. Affected builds are Genian NAC 5.0.75 LTS, 5.0.85 Stable and 5.0.86, and Genian ZTNA 6.0.35 LTS, 6.0.45 Stable and 6.0.46. Exploitation is gated almost entirely by network exposure: the endpoint is not reachable in properly segmented management planes, while flat networks or an internet-exposed policy server are directly exploitable - no public exploit code has been identified at time of analysis and there is no confirmed active exploitation (CISA KEV) signal.
High-privilege authenticated users can abuse the agent upgrade feature in Genian NAC and Genian ZTNA to write files outside the intended extraction directory via a ZIP Slip path traversal (CWE-862, missing authorization and integrity verification), which can result in arbitrary code execution on the appliance. Affected releases include Genian NAC 4.0.175, 5.0.65 LTS, 5.0.75 LTS, 5.0.85 Stable, and 5.0.86, plus Genian ZTNA 6.0.26 LTS, 6.0.35 LTS, 6.0.45 Stable, and 6.0.46. Exploitation is gated by high attack complexity and a high privilege requirement (PR:H) on the upgrade/management function, and there is no public exploit identified at time of analysis; the vendor (via KrCERT) scores it CVSS 4.0 5.9 Medium with integrity-only impact, while an independent assessment rates CVSS 3.1 7.0 (AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) reflecting the possible RCE outcome.
Unauthenticated invocation of internal functions on the Genian NAC/ZTNA policy server's internal-only IPC SOAP endpoint allows a network-reachable attacker to manipulate protected data and degrade or shut down the service, scoring 9.3 (CVSS 4.0) and assessed as CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H. Affected builds are Genian NAC 5.0.75 LTS, 5.0.85 Stable and 5.0.86, and Genian ZTNA 6.0.35 LTS, 6.0.45 Stable and 6.0.46. Exploitation is gated almost entirely by network exposure: the endpoint is not reachable in properly segmented management planes, while flat networks or an internet-exposed policy server are directly exploitable - no public exploit code has been identified at time of analysis and there is no confirmed active exploitation (CISA KEV) signal.
High-privilege authenticated users can abuse the agent upgrade feature in Genian NAC and Genian ZTNA to write files outside the intended extraction directory via a ZIP Slip path traversal (CWE-862, missing authorization and integrity verification), which can result in arbitrary code execution on the appliance. Affected releases include Genian NAC 4.0.175, 5.0.65 LTS, 5.0.75 LTS, 5.0.85 Stable, and 5.0.86, plus Genian ZTNA 6.0.26 LTS, 6.0.35 LTS, 6.0.45 Stable, and 6.0.46. Exploitation is gated by high attack complexity and a high privilege requirement (PR:H) on the upgrade/management function, and there is no public exploit identified at time of analysis; the vendor (via KrCERT) scores it CVSS 4.0 5.9 Medium with integrity-only impact, while an independent assessment rates CVSS 3.1 7.0 (AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) reflecting the possible RCE outcome.