CVE-2023-40253
MediumCVSS 6.0Exploitation Probability (EPSS)
Low risk29th percentile - higher than 29% of all known CVEs
Summary
Improper authentication vulnerability in Genians Genian NAC and Genians Genian ZTNA allows authentication abuse. This affects versions from V4.0.0 to V4.0.155 and from V5.0.0 to V5.0.54.
Risk Assessment
Improper authentication may lead to unauthorized access to systems, posing a serious security threat to the organization.
Recommendation
It is recommended to update to the latest software versions to mitigate the risk associated with this vulnerability.
Other vulnerabilities in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA
See all- CVE-2023-40252Medium
CVE-2023-40252 describes an improper control of code generation ('code injection') vulnerability in Genians Genian NAC and Genians ZTNA, allowing for the replacement of trusted executables. This affects versions from V4.0.0 to V4.0.155 for Genian NAC V4.0, from V5.0.0 to V5.0.42 for Genian NAC V5.0, from V5.0.0 to V5.0.54 for Genian NAC Suite V5.0, and from V6.0.0 to V6.0.15 for Genians ZTNA.
- CVE-2023-40251Medium
A vulnerability in Genians Genian NAC and Genian ZTNA related to missing encryption of sensitive data allows for Man in the Middle attacks. This affects versions V4.0, V5.0, and V6.0.
- CVE-2023-40254High
Versions of Genians Genian NAC and Genian ZTNA have a vulnerability that allows code download without integrity check, enabling malicious software updates.
Original NVD description (English source)
Improper Authentication vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Authentication Abuse.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through V5.0.42 (Revision 117460); Genian NAC Suite V5.0: from V5.0.0 through V5.0.54; Genian ZTNA: from V6.0.0 through V6.0.15.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS