CVE-2023-35767

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Nov 8, 2023
Updated: Nov 15, 2023
CWE ID 400

Summary

CVE-2023-35767 is a newly discovered vulnerability affecting Helix Core versions before 2023.2. This issue permits an unauthenticated attacker to execute a Denial of Service (DoS) attack through the shutdown function. By exploiting this vulnerability, an attacker can cause the system to shut down unexpectedly, resulting in service disruption. The vulnerability was reported by cybersecurity researcher Jason Geffner. Users are strongly encouraged to update their Helix Core systems to the latest version to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share