CVE-2023-50442
low-risk
Published 2023-12-13
Encrypted folders created by PRIMX ZONECENTRAL through 2023.5 can be modified by a local attacker (with appropriate privileges) so that specific file types are excluded from encryption temporarily. (This modification can, however, be detected, as described in the Administrator Guide.)
Do I need to act?
-
0.07% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10
Medium
LOCAL
/ LOW complexity
Affected Products (1)
Zonecentral
Affected Vendors
References (4)
Vendor Advisory
https://www.primx.eu/en/bulletins/security-bulletin-23B30933/
Product
https://www.primx.eu/fr/blog/
Vendor Advisory
https://www.primx.eu/en/bulletins/security-bulletin-23B30933/
Product
https://www.primx.eu/fr/blog/
23
/ 100
low-risk
Severity
18/34 · Moderate
Exploitability
0/34 · Minimal
Exposure
5/34 · Minimal