CVE-2023-39415

moderate-risk

Published 2023-08-18

Improper authentication vulnerability in Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote unauthenticated attacker to log in to the product's Control Panel and perform an unintended operation.

Do I need to act?

0.34% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.5/10 High

NETWORK / LOW complexity

Affected Products (4)

Proself

Affected Vendors

Northgrid

References (6)

Third Party Advisory https://jvn.jp/en/jp/JVN19661362/

Vendor Advisory https://www.proself.jp/information/149/

Vendor Advisory https://www.proself.jp/information/150/

Third Party Advisory https://jvn.jp/en/jp/JVN19661362/

Vendor Advisory https://www.proself.jp/information/149/

Vendor Advisory https://www.proself.jp/information/150/

/ 100

moderate-risk

Severity 26/34 · High

Exploitability 1/34 · Minimal

Exposure 10/34 · Low