CVE-2023-38312
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2023-38312 is a newly discovered directory traversal vulnerability affecting Valve's Counter-Strike game server (8684). This issue permits a client with remote control access to read arbitrary files on the underlying server by manipulating the motdfile console variable. An attacker could potentially gain unauthorized access to sensitive information, leading to potential security risks and privacy concerns. Valve is encouraged to release a patch to mitigate this vulnerability and prevent potential exploitation. Game server administrators are advised to take immediate action and secure their environments.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Valve
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions