CVE-2023-31067

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Sep 11, 2023

Updated: Sep 13, 2023

CWE ID 276

Summary

CVE-2023-31067 is a newly identified vulnerability affecting TSplus Remote Access versions up to 16.0.2.14. This issue grants Full Control permissions to Everyone for certain directories residing in %PROGRAMFILES(X86)%\\TSplus\\Clients\\www, potentially leading to unauthorized access or data manipulation. Exploitation could result in severe consequences, including system compromise. Users are urged to update their TSplus Remote Access installations to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

TSplus Remote Access

Affected Vendors

TSPlus

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/sap7YB
https://www.cve.org/CVERecord?id=CVE-2023-31067
https://nvd.nist.gov/vuln/detail/CVE-2023-31067

Back to Vulnerability Database