CVE-2023-39416

moderate-risk

Published 2023-08-18

Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote authenticated attacker with an administrative privilege to execute arbitrary OS commands.

Do I need to act?

0.62% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.2/10 High

NETWORK / LOW complexity

Affected Products (4)

Proself

Affected Vendors

Northgrid

References (6)

Third Party Advisory https://jvn.jp/en/jp/JVN19661362/

Vendor Advisory https://www.proself.jp/information/149/

Vendor Advisory https://www.proself.jp/information/150/

Third Party Advisory https://jvn.jp/en/jp/JVN19661362/

Vendor Advisory https://www.proself.jp/information/149/

Vendor Advisory https://www.proself.jp/information/150/

/ 100

moderate-risk

Severity 26/34 · High

Exploitability 2/34 · Minimal

Exposure 10/34 · Low