CVE-2023-47267

published 2023-12-19

CVE-2023-47267: An issue discovered in TheGreenBow Windows Enterprise Certified VPN Client 6.52, Windows Standard VPN Client 6.87, and Windows Enterprise VPN Client 6.87…

Priority P3 48 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

An issue discovered in TheGreenBow Windows Enterprise Certified VPN Client 6.52, Windows Standard VPN Client 6.87, and Windows Enterprise VPN Client 6.87 allows attackers to gain escalated privileges via crafted changes to memory mapped file.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
thegreenbow	thegreenbow_vpn_client	>= 6.52.004 < 6.52.006	6.52.006
thegreenbow	thegreenbow_vpn_client	>= 6.87.001 < 6.87.108	6.87.108
thegreenbow	thegreenbow_vpn_client	>= 6.87.001 < 6.87.109	6.87.109

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-269