CVE-2023-42708

Summary

CVE-2023-42708 is a vulnerability affecting a firewall service where a missing permission check allows an application to write usage records. This issue does not require any additional execution privileges and can result in local information disclosure. An attacker who successfully exploits this vulnerability could gain insight into the behavior and activity of the targeted system. While this vulnerability does not grant administrative control or the ability to install malware, it still poses a risk to the confidentiality of the impacted system. Organizations using the affected firewall service are advised to apply the necessary patches promptly to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.