CVE-2022-23763

High

Description

Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and execute arbitrary files. Remote attackers can use this vulerability to encourage users to access crafted web pages, causing damage such as malicious code infections.

SeverityHigh
CVSS7.8
Exploit probability—
ProductDouzone Neors
PublishedJun 28, 2022
First seenJun 28, 2022
Weakness typeCWE-346CWE-346

How to fix

Update
  • douzone neors2021.3.10.1 or later

Affected products

ProductAffected versionsFixed in
douzone neorsv < 2021.3.10.12021.3.10.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.