CVE-2023-34758

HighCVSS 8.1

Published: 28/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.48%

37th percentile - higher than 37% of all known CVEs

Summary

Sliver from versions 1.5.x to 1.5.39 has an improper cryptographic implementation, allowing attackers to execute a man-in-the-middle attack via intercepted and crafted responses.

Risk Assessment

The organization may be exposed to data interception and communication manipulation, leading to loss of confidentiality and integrity of information.

Recommendation

It is recommended to update Sliver to the latest version to mitigate this vulnerability and implement additional measures to secure communication.

Other vulnerabilities in Sliver

CVE-2026-34227High
Sliver before version 1.7.4 has a vulnerability where a single click on a malicious link gives an unauthenticated attacker immediate control over all active C2 sessions and beacons via the operator's browser, enabling data exfiltration or infrastructure destruction.

Original NVD description (English source)

Sliver from v1.5.x to v1.5.39 has an improper cryptographic implementation, which allows attackers to execute a man-in-the-middle attack via intercepted and crafted responses.