CVE-2023-40253
Medium
Description
Improper Authentication vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Authentication Abuse.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through V5.0.42 (Revision 117460); Genian NAC Suite V5.0: from V5.0.0 through V5.0.54; Genian ZTNA: from V6.0.0 through V6.0.15.
SeverityMedium
CVSS6.0
Exploit probability—
ProductGenians Genian Nac
PublishedAug 11, 2023
First seenAug 11, 2023
Weakness typeCWE-78OS command injection
How to fix
Update
- genians genian_nac4.0.156, 5.0.55 or later
- genians genian_ztna6.0.16 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| genians genian_nac | 4.0.0 ≤ v < 4.0.156, 5.0.0 ≤ v < 5.0.55, 5.0.42 | 4.0.156, 5.0.55 |
| genians genian_ztna | 6.0.0 ≤ v < 6.0.16 | 6.0.16 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.