CVE-2023-40254
High
Description
Download of Code Without Integrity Check vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Malicious Software Update.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through V5.0.42 (Revision 117460); Genian NAC Suite V5.0: from V5.0.0 through V5.0.54; Genian ZTNA: from V6.0.0 through V6.0.15.
SeverityHigh
CVSS7.5
Exploit probability—
ProductGenians Genian Nac
PublishedAug 11, 2023
First seenAug 11, 2023
Weakness typeCWE-89SQL injection
How to fix
Update
- genians genian_nac4.0.156, 5.0.55 or later
- genians genian_ztna6.0.16 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| genians genian_nac | 4.0.0 ≤ v < 4.0.156, 5.0.0 ≤ v < 5.0.55, 5.0.42 | 4.0.156, 5.0.55 |
| genians genian_ztna | 6.0.0 ≤ v < 6.0.16 | 6.0.16 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.