CVE-2023-45284
Incorrect detection of reserved device names on Windows in path/filepath
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 5.3EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
09 nov 2023Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
On Windows, The IsLocal function does not correctly detect reserved device names in some cases. Reserved names followed by spaces, such as "COM1 ", and reserved names "COM" and "LPT" followed by superscript 1, 2, or 3, are incorrectly reported as local. With fix, IsLocal now correctly reports these names as non-local.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Productos afectados
Go standard library · path/filepath¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →