CVE-2023-51837

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Jan 30, 2024
Updated: Feb 5, 2024
CWE ID 295

Summary

CVE-2023-51837 is a newly identified vulnerability affecting Ylianst MeshCentral version 1.1.16. This issue stems from a missing SSL certificate validation, allowing an attacker to potentially intercept and manipulate data transmitted between the server and clients. An unsecured connection could lead to unauthorized access, data theft, and other malicious activities. Users are strongly advised to update their MeshCentral software to a patched version as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share