CVE-2015-4523
CriticalSummary
Blue Coat Malware Analysis Appliance (MAA) before version 4.2.5 and Malware Analyzer G2 allow remote attackers to bypass a virtual machine protection mechanism, potentially leading to writing to arbitrary files, causing denial of service (host reboot or reset to factory defaults), or executing arbitrary code.
Risk Assessment
The organization may face serious threats, including data loss, system downtime, and the potential for remote execution of unauthorized code.
Recommendation
It is recommended to upgrade to version 4.2.5 or later to mitigate this vulnerability and conduct a security audit of the systems.
Original NVD description (English source)
Blue Coat Malware Analysis Appliance (MAA) before 4.2.5 and Malware Analyzer G2 allow remote attackers to bypass a virtual machine protection mechanism and consequently write to arbitrary files, cause a denial of service (host reboot or reset to factory defaults), or execute arbitrary code via vectors related to saving files during analysis.