DeutschShown in its original language — a full translation is planned for a future version.
Tenable Security Nessus Network Monitor: Mehrere Schwachstellen
view advisory published 2023-10-25
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Tenable Security Nessus Network Monitor ausnutzen, um seine Privilegien zu erhöhen, beliebigen Programmcode mit Administratorrechten auszuführen oder Dateien zu manipulieren.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-5624US | high7.2 | — | ||
Under certain conditions, Nessus Network Monitor was found to not properly enforce input validation. This could allow an admin user to alter parameters that could potentially allo… | ||||
| CVE-2023-5623US | high7.8OT elevated | — | ||
NNM failed to properly set ACLs on its installation directory, which could allow a low privileged user to run arbitrary code with SYSTEM privileges where NNM is installed to a non… | ||||
| CVE-2023-5622US | high8.8 | — | ||
Under certain conditions, Nessus Network Monitor could allow a low privileged user to escalate privileges to NT AUTHORITY\SYSTEM on Windows hosts by replacing a specially crafted… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan