CVE-2023-40251
Medium
Description
Missing Encryption of Sensitive Data vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Man in the Middle Attack.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through V5.0.42 (Revision 117460); Genian NAC Suite V5.0: from V5.0.0 through V5.0.54; Genian ZTNA: from V6.0.0 through V6.0.15.
SeverityMedium
CVSS5.2
Exploit probability—
ProductGenians Genian Nac
PublishedAug 17, 2023
First seenAug 17, 2023
Weakness typeCWE-311CWE-311
How to fix
Update
- genians genian_nac4.0.156, 5.0.55 or later
- genians genian_ztna6.0.16 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| genians genian_nac | 4.0.0 ≤ v < 4.0.156, 5.0.0 ≤ v < 5.0.55, 5.0.42 | 4.0.156, 5.0.55 |
| genians genian_ztna | 6.0.0 ≤ v < 6.0.16 | 6.0.16 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.