CVE-2023-39341
CVE-2023-39341
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
09 Aug 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
"FFRI yarai", "FFRI yarai Home and Business Edition" and their OEM products handle exceptional conditions improperly, which may lead to denial-of-service (DoS) condition.
Affected products and versions are as follows: FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0, FFRI yarai Home and Business Edition version 1.4.0, InfoTrace Mark II Malware Protection (Mark II Zerona) versions 3.0.1 to 3.2.2, Zerona / Zerona PLUS versions 3.2.32 to 3.2.36, ActSecure χ versions 3.4.0 to 3.4.6 and 3.5.0, Dual Safe Powered by FFRI yarai version 1.4.1, EDR Plus Pack (Bundled FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0), and EDR Plus Pack Cloud (Bundled FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0).
Affected products
FFRI Security, Inc. · FFRI yaraiFFRI Security, Inc. · FFRI yarai Home and Business EditionNEC Corporation · ActSecure χSky Co., Ltd. · EDR Plus PackSky Co., Ltd. · EDR Plus Pack CloudSoliton Systems K.K. · InfoTrace Mark II Malware Protection (Mark II Zerona)Soliton Systems K.K. · Zerona / Zerona PLUSSOURCENEXT CORPORATION · Dual Safe Powered by FFRI yaraiWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →