CVE-2023-45797
published 2023-10-30CVE-2023-45797: A Buffer overflow vulnerability in DreamSecurity MagicLine4NX versions 1.0.0.1 to 1.0.0.26 allows an attacker to remotely execute code.
PriorityP276critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
ITWVulnCheck KEV
Exploited in the wild
EPSS
0.82%
52.7th percentile
A Buffer overflow vulnerability in DreamSecurity MagicLine4NX versions 1.0.0.1 to 1.0.0.26 allows an attacker to remotely execute code.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| dream_security | magicline4nx | 1.0.0.1 – 1.0.0.26 | — |
| dreamsecurity | magicline_4.0 | 1.0.0.1 – 1.0.0.26 | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vulncheck9.8CRITICAL
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-q55p-r853-6qcm: A Buffer overflow vulnerability in DreamSecurity MagicLine4NX versions 1
ghsa_unreviewed·2023-10-30
CVE-2023-45797 [CRITICAL] CWE-120 GHSA-q55p-r853-6qcm: A Buffer overflow vulnerability in DreamSecurity MagicLine4NX versions 1
A Buffer overflow vulnerability in DreamSecurity MagicLine4NX versions 1.0.0.1 to 1.0.0.26 allows an attacker to remotely execute code.
VulnCheck
dreamsecurity magicline_4.0 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
vulncheck·2023·CVSS 9.8
CVE-2023-45797 [CRITICAL] dreamsecurity magicline_4.0 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
dreamsecurity magicline_4.0 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
A Buffer overflow vulnerability in DreamSecurity MagicLine4NX versions 1.0.0.1 to 1.0.0.26 allows an attacker to remotely execute code.
Affected: dreamsecurity magicline_4.0
Required Action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Exploitation References: https://asec.ahnlab.com/wp-content/uploads/2023/10/20231013_Lazarus_OP.Dream_Magic.pdf; https://eng.nis.go.kr/common/download.do?type=&seq=8E464392CD0485169FA97278AEE8B607
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-10-30
Published
Exploited in the wild