cvelistv5 - cve-2023-50738

CVE-2023-50738 (GCVE-0-2023-50738)

Vulnerability from cvelistv5 – Published: 2025-01-17 21:10 – Updated: 2025-01-17 22:02

Summary

A new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to override this downgrade protection has been identified.

Severity ?

4.3 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

CWE

CWE-354 - Improper Validation of Integrity Check Value
CWE-1328 - Security Version Number Mutable to Older Versions

Assigner

Lexmark

References

URL

Tags

https://www.lexmark.com/en_us/solutions/security/…

Impacted products

	Vendor	Product	Version
	Lexmark	Printer Firmware	Affected: 0 , ≤ 230.041 (custom) Affected: 230.075 , ≤ 230.086 (custom) Affected: 230.100 , ≤ 230.104 (custom) Affected: 230.200 , ≤ 230.209 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-50738",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-17T22:02:51.732818Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-17T22:02:59.237Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Printer Firmware",
          "vendor": "Lexmark",
          "versions": [
            {
              "lessThanOrEqual": "230.041",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "230.086",
              "status": "affected",
              "version": "230.075",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "230.104",
              "status": "affected",
              "version": "230.100",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "230.209",
              "status": "affected",
              "version": "230.200",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A\u0026nbsp;new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to \noverride this downgrade protection has been identified."
            }
          ],
          "value": "A\u00a0new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to \noverride this downgrade protection has been identified."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-21",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-21 Exploitation of Trusted Identifiers"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-354",
              "description": "CWE-354 Improper Validation of Integrity Check Value",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-1328",
              "description": "CWE-1328 Security Version Number Mutable to Older Versions",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-17T21:27:34.693Z",
        "orgId": "7bc73191-a2b6-4c63-9918-753964601853",
        "shortName": "Lexmark"
      },
      "references": [
        {
          "url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "A firmware downgrade prevention vulnerability has been identified in newer Lexmark devices.",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
    "assignerShortName": "Lexmark",
    "cveId": "CVE-2023-50738",
    "datePublished": "2025-01-17T21:10:44.220Z",
    "dateReserved": "2023-12-11T20:00:38.337Z",
    "dateUpdated": "2025-01-17T22:02:59.237Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-50738\",\"sourceIdentifier\":\"7bc73191-a2b6-4c63-9918-753964601853\",\"published\":\"2025-01-17T21:15:09.660\",\"lastModified\":\"2025-01-17T22:15:28.167\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A\u00a0new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to \\noverride this downgrade protection has been identified.\"},{\"lang\":\"es\",\"value\":\"Recientemente se agreg\u00f3 a algunos productos Lexmark una nueva funci\u00f3n para evitar la degradaci\u00f3n del firmware. Se ha identificado un m\u00e9todo para anular esta protecci\u00f3n contra la degradaci\u00f3n.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"7bc73191-a2b6-4c63-9918-753964601853\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L\",\"baseScore\":4.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"ADJACENT_NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":0.9,\"impactScore\":3.4}]},\"weaknesses\":[{\"source\":\"7bc73191-a2b6-4c63-9918-753964601853\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-354\"},{\"lang\":\"en\",\"value\":\"CWE-1328\"}]}],\"references\":[{\"url\":\"https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html\",\"source\":\"7bc73191-a2b6-4c63-9918-753964601853\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-50738\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-01-17T22:02:51.732818Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-01-17T22:02:55.888Z\"}}], \"cna\": {\"title\": \"A firmware downgrade prevention vulnerability has been identified in newer Lexmark devices.\", \"source\": {\"discovery\": \"UNKNOWN\"}, \"impacts\": [{\"capecId\": \"CAPEC-21\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-21 Exploitation of Trusted Identifiers\"}]}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 4.3, \"attackVector\": \"ADJACENT_NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L\", \"integrityImpact\": \"LOW\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"LOW\", \"privilegesRequired\": \"HIGH\", \"confidentialityImpact\": \"LOW\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Lexmark\", \"product\": \"Printer Firmware\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"230.041\"}, {\"status\": \"affected\", \"version\": \"230.075\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"230.086\"}, {\"status\": \"affected\", \"version\": \"230.100\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"230.104\"}, {\"status\": \"affected\", \"version\": \"230.200\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"230.209\"}], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html\"}], \"x_generator\": {\"engine\": \"Vulnogram 0.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A\\u00a0new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to \\noverride this downgrade protection has been identified.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"A\u0026nbsp;new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to \\noverride this downgrade protection has been identified.\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-354\", \"description\": \"CWE-354 Improper Validation of Integrity Check Value\"}]}, {\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-1328\", \"description\": \"CWE-1328 Security Version Number Mutable to Older Versions\"}]}], \"providerMetadata\": {\"orgId\": \"7bc73191-a2b6-4c63-9918-753964601853\", \"shortName\": \"Lexmark\", \"dateUpdated\": \"2025-01-17T21:27:34.693Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2023-50738\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-01-17T22:02:59.237Z\", \"dateReserved\": \"2023-12-11T20:00:38.337Z\", \"assignerOrgId\": \"7bc73191-a2b6-4c63-9918-753964601853\", \"datePublished\": \"2025-01-17T21:10:44.220Z\", \"assignerShortName\": \"Lexmark\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

WID-SEC-W-2024-0783

Vulnerability from csaf_certbund - Published: 2024-04-03 22:00 - Updated: 2024-04-03 22:00

Summary

Lexmark Multifunction Printer: Mehrere Schwachstellen ermöglichen Codeausführung

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung

Lexmark ist ein Hersteller von Druckern und Druckerzubehör.

Angriff

Ein Angreifer kann mehrere Schwachstellen in Lexmark Multifunction Printer ausnutzen, um beliebigen Programmcode auszuführen.

Betroffene Betriebssysteme

- BIOS/Firmware

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Lexmark ist ein Hersteller von Druckern und Druckerzubeh\u00f6r.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in Lexmark Multifunction Printer ausnutzen, um beliebigen Programmcode auszuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- BIOS/Firmware",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2024-0783 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0783.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2024-0783 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0783"
      },
      {
        "category": "external",
        "summary": "Lexmark Security Advisory CVE-2023-50733 vom 2024-04-03",
        "url": "https://publications.lexmark.com/publications/security-alerts/CVE-2023-50733.pdf"
      },
      {
        "category": "external",
        "summary": "Lexmark Security Advisory CVE-2023-50738 vom 2024-04-03",
        "url": "https://publications.lexmark.com/publications/security-alerts/CVE-2023-50738.pdf"
      },
      {
        "category": "external",
        "summary": "Lexmark Security Advisory CVE-2023-50739 vom 2024-04-03",
        "url": "https://publications.lexmark.com/publications/security-alerts/CVE-2023-50739.pdf"
      }
    ],
    "source_lang": "en-US",
    "title": "Lexmark Multifunction Printer: Mehrere Schwachstellen erm\u00f6glichen Codeausf\u00fchrung",
    "tracking": {
      "current_release_date": "2024-04-03T22:00:00.000+00:00",
      "generator": {
        "date": "2024-08-15T18:07:14.438+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.5"
        }
      },
      "id": "WID-SEC-W-2024-0783",
      "initial_release_date": "2024-04-03T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2024-04-03T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Lexmark Multifunction Printer",
            "product": {
              "name": "Lexmark Multifunction Printer",
              "product_id": "T033887",
              "product_identification_helper": {
                "cpe": "cpe:/h:lexmark:multifunction_printer:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Lexmark"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-50733",
      "notes": [
        {
          "category": "description",
          "text": "Es besteht eine Schwachstelle in Lexmark Multifunktionsdruckern. Diese Schwachstelle besteht in der Web Services-Funktion aufgrund einer Server-Side Request Forgery (SSRF) Anf\u00e4lligkeit. Ein entfernter, anonymer Angreifer kann diese Schwachstelle zur Ausf\u00fchrung von beliebigem Code ausnutzen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033887"
        ]
      },
      "release_date": "2024-04-03T22:00:00.000+00:00",
      "title": "CVE-2023-50733"
    },
    {
      "cve": "CVE-2023-50738",
      "notes": [
        {
          "category": "description",
          "text": "Es besteht eine Schwachstelle in Lexmark Multifunktionsdruckern. Dieser Fehler besteht aufgrund einer unsachgem\u00e4\u00dfen Verteidigung der Funktion zur Verhinderung eines Firmware-Downgrades. Ein privilegierter Angreifer im angrenzenden Netzbereich kann diese Schwachstelle zur Ausf\u00fchrung von beliebigem Code ausnutzen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033887"
        ]
      },
      "release_date": "2024-04-03T22:00:00.000+00:00",
      "title": "CVE-2023-50738"
    },
    {
      "cve": "CVE-2023-50739",
      "notes": [
        {
          "category": "description",
          "text": "Es besteht eine Schwachstelle in Lexmark Multifunktionsdruckern. Dieser Fehler besteht im Internet Printing Protocol (IPP) aufgrund eines Puffer\u00fcberlaufproblems. Ein anonymer Angreifer im angrenzenden Netzbereich kann diese Schwachstelle zur Ausf\u00fchrung von beliebigem Code ausnutzen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033887"
        ]
      },
      "release_date": "2024-04-03T22:00:00.000+00:00",
      "title": "CVE-2023-50739"
    }
  ]
}

GHSA-56MC-FPWX-P947

Vulnerability from github – Published: 2025-01-17 21:31 – Updated: 2025-01-18 00:30

Details

A new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to override this downgrade protection has been identified.

Severity ?

4.3 (Medium)


                  
                    CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

10.0 (Critical)


                  
                    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2023-50738"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-354"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-01-17T21:15:09Z",
    "severity": "CRITICAL"
  },
  "details": "A\u00a0new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to \noverride this downgrade protection has been identified.",
  "id": "GHSA-56mc-fpwx-p947",
  "modified": "2025-01-18T00:30:48Z",
  "published": "2025-01-17T21:31:39Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-50738"
    },
    {
      "type": "WEB",
      "url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}

FKIE_CVE-2023-50738

Vulnerability from fkie_nvd - Published: 2025-01-17 21:15 - Updated: 2025-01-17 22:15

Severity ?

4.3 (Medium) - CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Summary

A new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to override this downgrade protection has been identified.

References

	URL	Tags
	7bc73191-a2b6-4c63-9918-753964601853	https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A\u00a0new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to \noverride this downgrade protection has been identified."
    },
    {
      "lang": "es",
      "value": "Recientemente se agreg\u00f3 a algunos productos Lexmark una nueva funci\u00f3n para evitar la degradaci\u00f3n del firmware. Se ha identificado un m\u00e9todo para anular esta protecci\u00f3n contra la degradaci\u00f3n."
    }
  ],
  "id": "CVE-2023-50738",
  "lastModified": "2025-01-17T22:15:28.167",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "ADJACENT_NETWORK",
          "availabilityImpact": "LOW",
          "baseScore": 4.3,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
          "version": "3.1"
        },
        "exploitabilityScore": 0.9,
        "impactScore": 3.4,
        "source": "7bc73191-a2b6-4c63-9918-753964601853",
        "type": "Secondary"
      }
    ]
  },
  "published": "2025-01-17T21:15:09.660",
  "references": [
    {
      "source": "7bc73191-a2b6-4c63-9918-753964601853",
      "url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
    }
  ],
  "sourceIdentifier": "7bc73191-a2b6-4c63-9918-753964601853",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-354"
        },
        {
          "lang": "en",
          "value": "CWE-1328"
        }
      ],
      "source": "7bc73191-a2b6-4c63-9918-753964601853",
      "type": "Secondary"
    }
  ]
}

GSD-2023-50738

Vulnerability from gsd - Updated: 2023-12-13 01:20

Details

** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Aliases

CVE-2023-50738

Aliases

CVE-2023-50738

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2023-50738",
    "id": "GSD-2023-50738"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2023-50738"
      ],
      "id": "GSD-2023-50738",
      "modified": "2023-12-13T01:20:31.207686Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2023-50738",
        "STATE": "RESERVED"
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
          }
        ]
      }
    }
  }
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2023-50738 (GCVE-0-2023-50738)

WID-SEC-W-2024-0783

GHSA-56MC-FPWX-P947

FKIE_CVE-2023-50738

GSD-2023-50738

Tags

Sightings

Nomenclature